luxurytravelsolutions.com
Issued by R3
About this certificate
This digital certificate with serial number 04:60:ae:20:5b:de:a1:f5:5f:f2:7d:3c:58:cf:f8:aa:63:83 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=luxurytravelsolutions.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:60:ae:20:5b:de:a1:f5:5f:f2:7d:3c:58:cf:f8:aa:63:83Serial Number (int): 381347704639555177292322621516988432409475
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: b1:eb:56:15:b3:08:57:70:0e:2c:2c:70:01:f8:cd:ca:d0:a2:52:c7
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): df:53:81:ba:60:49:f6:10:5b:88:5f:26:15:3a:43:e6:b5:30:28:d3
Fingerprint (sha256): d9:d8:6a:22:67:4f:f0:b0:68:a1:94:49:2f:c2:55:42:4a:8a:80:0d:ea:02:9b:79:ed:da:8f:a0:8e:0f:09:29
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate luxurytravelsolutions.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for luxurytravelsolutions.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
luxurytravelsolutions.com
www.luxurytravelsolutions.com
www.luxurytravelsolutions.com
Other certificates including the domain name luxurytravelsolutions.com
(limited to 100 certificates)
luxurytravelsolutions.com
www.impactsalesreps.com
keywestpros.com
www.boulderstemcelltreatmentcenters.com
www.embroiderysoft.com
metouia.com
www.serenitylegalcenters.com
www.chavesfamily.com
www.increasys.com
acuteflaccidparalysis.com
www.privateactivities.com
studdedcondoms.com
www.weedjuices.com
luxurytravelsolutions.com
www.revolutionprinters.com
www.sharpper.com
chainsets.com
www.simplephotoswap.com
norwalkpowerwash.com
luxurytravelsolutions.com
www.gamezone.co.in
kulabrandscomplaints.com
www.charlottestemcellcenters.com
www.gracesfane.com
www.massachusettsprp.com
desenzano.co
www.blockchainofelections.com
www.impactsalesreps.com
keywestpros.com
www.boulderstemcelltreatmentcenters.com
www.embroiderysoft.com
metouia.com
www.serenitylegalcenters.com
www.chavesfamily.com
www.increasys.com
acuteflaccidparalysis.com
www.privateactivities.com
studdedcondoms.com
www.weedjuices.com
luxurytravelsolutions.com
www.revolutionprinters.com
www.sharpper.com
chainsets.com
www.simplephotoswap.com
norwalkpowerwash.com
luxurytravelsolutions.com
www.gamezone.co.in
kulabrandscomplaints.com
www.charlottestemcellcenters.com
www.gracesfane.com
www.massachusettsprp.com
desenzano.co
www.blockchainofelections.com
Certificate
The complete raw certificate details for luxurytravelsolutions.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGHDCCBQSgAwIBAgISBGCuIFveofVf8n08WM/4qmODMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzEwMjMxOTA3MDdaFw0yNDAxMjExOTA3MDZaMCQxIjAgBgNVBAMT GWx1eHVyeXRyYXZlbHNvbHV0aW9ucy5jb20wggIiMA0GCSqGSIb3DQEBAQUAA4IC DwAwggIKAoICAQDUy9KTYjA7Py3NNA3GBkQw01v+oUfLoWDpjkc0r1zrTPBO65gN 1yMr+0JfnVQZrKLSsLEsp88WCNauuS+Isl3daOyKC/vwM6VyP4IHe6GWoMKgitc3 ccnqhkn9s1CRSaJPz78O+iCI2dQczVLXy4Vum4oc00l73160dAxXWPi1mLd8WD6K 9lSq3YWnNiYPOCj5V2QcI/piNkcyym/m6fJuXPoCye0OKKy7lc8HZ1FZs4+AiDRY LOQ2xJigHgerCTSuEBUsxp0ao8h+rlELqs1A1yfzB7q4EQRFKyEPF2ykRvqGrITa 9qOoqAC37m2jugSFFiHlHZLy3jU7lIuoXgRP53iFK931YpjMLfe+pVdBn5RenaE/ wjjVbn46jfXkZ4pt8NIxsbeh++YRny2K7AgmJ1hQdgOa6MTLFL/eE4N3oLkfG3aS 2VJFv2al9cKlw5TKO2GlNa5r3Im1NTBY/KKvbpaiwEslmrMkpkyRAWuYJDiBaj5o sfxnNTiXQdCwx3l/9BXHtfhDcN2dcXG5NZbiWYOchI0ygJ/XhjSnE4IlOcOnrKwi FlFw5gU0Z9oyhJlJ0/aRtdDD6PxtpjHTWa7oEhgwA51uArwjodPzCDs+TuPQfOCg DfTMmBtAy5PQcVYgdIueoRf+2I/AQWIdmLcwlF99Zts8vmsXbJ7N1/wuMQIDAQAB o4ICODCCAjQwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggr BgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBSx61YVswhXcA4sLHAB+M3K 0KJSxzAfBgNVHSMEGDAWgBQULrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcB AQRJMEcwIQYIKwYBBQUHMAGGFWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEF BQcwAoYWaHR0cDovL3IzLmkubGVuY3Iub3JnLzBDBgNVHREEPDA6ghlsdXh1cnl0 cmF2ZWxzb2x1dGlvbnMuY29tgh13d3cubHV4dXJ5dHJhdmVsc29sdXRpb25zLmNv bTATBgNVHSAEDDAKMAgGBmeBDAECATCCAQIGCisGAQQB1nkCBAIEgfMEgfAA7gB1 ANq2v2s/tbYin5vCu1xr6HCRcWy7UYSFNL2kPTBI1/urAAABi14l880AAAQDAEYw RAIgdZUX7O/taKePKsNtJcScuTqL1aAsWnfZf6PB47Wa7hkCIFYX5QshcrWceWw4 fObqjZuYwowerAPGyswHnoXaISFGAHUAO1N3dT4tuYBOizBbBv5AO2fYT8P0x70A DS1yb+H61BcAAAGLXiX0IAAABAMARjBEAiAPfQI2/tdLZVvgCHuR7PAs7A3oVDlb D8x193Pez9W1ugIgOMs1y9e0M5DfzNpwf1tiFa8QOC9aF7KW7georzq3+Q0wDQYJ KoZIhvcNAQELBQADggEBAGuFtTKEeyDqojbWTgdmOeiQj6JnwLVVK4hdQwNgS9IS qWVr1AZSyNDU0RsgZ5Ywo1//JaDbTomB84m8D+TEYAORAgylThCg2I/k7TdXoQYQ HlH7GjC/xAr1dZIL0emXRrLqHL2S76T/gojvqxo1J4iAjgf2olu/Qmj59KIREGHB TmUhiGMJEhJIacAg7zqqzcfT5IKVYe9kauMrkgzMnkpO4hUc/uWOYoMCWWQb6JJg uJL5dEM5wsDjTVhaNGU2AV8oiuokKySehcXlsJSewWk82gVYZHDKTfSFyELwfAz+ CCe3MR29Q7U3XXbqD6mBaK6T5NLjAP9ar4959JRhzb4= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA1MvSk2IwOz8tzTQNxgZE MNNb/qFHy6Fg6Y5HNK9c60zwTuuYDdcjK/tCX51UGayi0rCxLKfPFgjWrrkviLJd 3Wjsigv78DOlcj+CB3uhlqDCoIrXN3HJ6oZJ/bNQkUmiT8+/DvogiNnUHM1S18uF bpuKHNNJe99etHQMV1j4tZi3fFg+ivZUqt2FpzYmDzgo+VdkHCP6YjZHMspv5uny blz6AsntDiisu5XPB2dRWbOPgIg0WCzkNsSYoB4Hqwk0rhAVLMadGqPIfq5RC6rN QNcn8we6uBEERSshDxdspEb6hqyE2vajqKgAt+5to7oEhRYh5R2S8t41O5SLqF4E T+d4hSvd9WKYzC33vqVXQZ+UXp2hP8I41W5+Oo315GeKbfDSMbG3ofvmEZ8tiuwI JidYUHYDmujEyxS/3hODd6C5Hxt2ktlSRb9mpfXCpcOUyjthpTWua9yJtTUwWPyi r26WosBLJZqzJKZMkQFrmCQ4gWo+aLH8ZzU4l0HQsMd5f/QVx7X4Q3DdnXFxuTWW 4lmDnISNMoCf14Y0pxOCJTnDp6ysIhZRcOYFNGfaMoSZSdP2kbXQw+j8baYx01mu 6BIYMAOdbgK8I6HT8wg7Pk7j0HzgoA30zJgbQMuT0HFWIHSLnqEX/tiPwEFiHZi3 MJRffWbbPL5rF2yezdf8LjECAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 381347704639555177292322621516988432409475 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-23 19:07:07 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-21 19:07:06 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'luxurytravelsolutions.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 868132681105898352291707321577803150228103546048662246474799492365887526922493639418142162114262460095990177725846228078925907080346143515316404357351172542265033035944485722400843793784942185072458705300629853036982280684522803218030734595557763040793821781259930281553708200259362542201185772684377910233668271633686056341836682829565135567221980681622069029540130943278425111913657219185712452452510956002709826233196503361518505733081538970050522833555860757260976899032189002279614441708291926059131365410253730380349044437982208374451918046740508728374571981567543909415703286113112031177163274148649364004944120888027428430720192021105701001276335160089171940360444522637431143368404520775551755842534378206178997337023549657678337604153470284853428437106678939432970330117278724488717091076858370480864559003981790564402067509494049563914784164767065012446018062375689942594758280190002522286318581601305090068885359677912012289669017926021014850757839967920140759412330941293347557915920999338019659233314297245872585344697185974905931294379634220356145230254955172880149511612368935026799710612904220061339809686142413348599002831761391851518619759093249266052261502217876115438100198960382982211188771964462861594956410417 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) b1eb5615b30857700e2c2c7001f8cdcad0a252c7 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luxurytravelsolutions.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.luxurytravelsolutions.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes) 00ee007500dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018b5e25f3cd00000403004630440220759517ecefed68a78f2ac36d25c49cb93a8bd5a02c5a77d97fa3c1e3b59aee1902205617e50b2172b59c796c387ce6ea8d9b98c28c1eac03c6cacc079e85da2121460075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018b5e25f420000004030046304402200f7d0236fed74b655be0087b91ecf02cec0de854395b0fcc75f773decfd5b5ba022038cb35cbd7b43390dfccda707f5b6215af10382f5a17b296ee07a8af3ab7f90d . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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