subpod.com

Issued by R3

About this certificate

This digital certificate with serial number 04:3a:a6:3e:69:fc:7e:b4:3c:fe:62:18:75:e1:bd:f0:20:68 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=subpod.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:3a:a6:3e:69:fc:7e:b4:3c:fe:62:18:75:e1:bd:f0:20:68
Serial Number (int): 368406496927818661004525884300025895329896
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 01:4d:47:00:b3:52:c3:fe:36:2e:5c:d0:2c:96:7a:9c:ae:5b:9e:25
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): c6:2d:7c:0a:91:43:1f:10:1e:22:58:cc:a9:cf:5b:44:28:1f:a2:f5
Fingerprint (sha256): da:7e:2a:2e:f6:ac:8e:a5:40:40:de:f1:75:c4:a0:a6:0b:f3:8d:23:f7:71:c0:67:2a:cd:e1:85:79:b6:98:cb

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate subpod.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for subpod.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

subpod.com

Other certificates including the domain name subpod.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for subpod.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZ9Y8ZdPhwqFg8YW93T1
xX8dZMkALsSoiOcH1D1AOwtsqc/tvcCm4ANOItvqem7yFuW+bAzMGzKuh+BL8bz3
6y6Y/1PKMjkrSTRPCBYCs9vuIkKrRHbvxcA6jxixnXUd4G6wY2ucem4b48w8Zfdw
S6afYUjz2M6XSWuVAX9sfWmt5TRWLjMIE4MyXi7Uqkt14oiRarNTUw+dfe6EcHlt
wMfoVN/pSBCyzBDYiLwyMkdX8uqopRP4Ftsw9ftDFvVtrs1LjjzXDkX0Hw/64dv2
wDy7PEkmXFyuRKs+aErZON2qP61KaTnic1z0j+hX0CQyV5dLMBdopsukx3YY8hcM
OwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 368406496927818661004525884300025895329896
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-28 21:14:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-27 21:14:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'subpod.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22927710348349499079791798753513514341792457643039307333569168847522424582982384749676653906803377319591229051413535952902692237670359726188994139012146145292106410001630300312922617071633865506212229625878759072399347510554377431135622254583867173372256917585605190773617450111912335797281565908420401536848423152452312519043537577177960086169007262029270944509774137391229557795089159513986868301517202090956207299840188680065884693480569791920454718932648382209055151663482042485373717025857011562442383087482611285010108848166830886717182295093934484088003046854127801464727353655742870647379966027776502168751163
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							014d4700b352c3fe362e5cd02c967a9cae5b9e25
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (14 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subpod.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018cb27e0962000004030046304402201a78a78c572d573a8c898a1a8a96211b25aea0bc97b70e1cf63de7fac9294228022028c568c04adb775f7008c57b4c7702b0205477185fbe8a3b150750cc5d52d4d700760029d03a1bb674aa711cd3035b6557c14f8aa78b4fe8389449eca453f944bd24680000018cb27e09e00000040300473045022003334b5f7a7ffa80f1286e77b1cfd1f441a7a0d6cd791638e053b227fb3a2eff022100e980aea27c727101dc495c1b392ca7c167f96b6f42cb198b3676dc7b50e39f0c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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