twentyideas.com

Issued by R3

About this certificate

This digital certificate with serial number 03:c5:3d:0e:bb:5a:a3:6b:cd:98:bc:d2:d1:c9:c8:67:9b:82 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=twentyideas.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c5:3d:0e:bb:5a:a3:6b:cd:98:bc:d2:d1:c9:c8:67:9b:82
Serial Number (int): 328453643478596223489702805757930754251650
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ed:0f:e5:d4:9c:61:7e:97:87:a9:cd:5d:5f:ec:43:10:1f:ba:11:09
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 86:76:d2:fb:d3:13:59:36:0d:a9:83:73:17:c2:43:2c:86:97:6a:8d
Fingerprint (sha256): db:d6:1b:b1:9a:7d:cb:b0:0a:b8:32:4e:a4:10:89:12:21:85:9b:43:29:1f:42:ee:4a:8f:36:4f:85:7a:88:ef

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate twentyideas.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for twentyideas.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

twentyideas.com

Other certificates including the domain name twentyideas.com

(limited to 100 certificates)
m-chemical.deepscholar.app
www.leonburger.fr
futuresoccerplayer.com
unifi2.twentyideas.com
clickcity.twentyideas.com
inoapp.com
lf-droner.dk
camwilcox.com
link.jokateszunk.hu
widget-sandbox.billmybank.com
www.sapp.mx
files.nulabs.it
xpop.twentyideas.com
www.mac-n.com
www.codein.ca
staging-www.masterytrack.twentyideas.com
jamieandlee.com
unifi2.twentyideas.com
xpop-staging.twentyideas.com
www.the-predictor.com
odyssee.jp
purrlocator.com
abdyaqbi.fun
xpop.twentyideas.com
sexbot.opendream.co.th
www.takealuke.com
recipeplanet.io
www.kspgindia.com
cevik.app
crtcheck1.task-connect.co.jp
door.twentyideas.com
angelo-fernandes-dev.fr
blog.sinanbolel.com
www.namanpujari.com
xpop.twentyideas.com
loggbok.net
www.fedtaxbiz.com
www.dhwani.app
referral.foodbus.app
heavenlytouchcs.econyse.com
clickcity-portal.twentyideas.com
unifi2.twentyideas.com
eliteresidencial.porcelanosapartners.com
www.marcelcominotto.be
memo-test.sunsuria.com
twentyideas.com
link.omrx.in
www.sofabot.ai
loggbok.net
anket.foodium.app
www.finn-veien.no
stxaviersvkm.talentester.com
www.drivedy.com
clickcity-dev.twentyideas.com
newssense.co
clickcity-portal-dev.twentyideas.com
diagonalconstructora.com
clickcity-portal-dev.twentyideas.com
theastrology.app
www.finn-veien.no
intellibaby.app
new.twentyideas.com
worker.link.alpha.gigsmart.com
twentyideas.com
www.bruiloft-bob-en-kimberly.nl
co-house.be
eql.ai
athikkal.com
battlefit.app
www.twentyideas.com
answerforwhostheceleb.africasunrise.com
nmbrs.pensioeninzichtelijk.nl
ifd-salzburg.at
www.japflip.com
givenswap.givenswap.com
www.sourcethe.coffee
www.dhwani.app
certificaciones.diazar.com
5club888-admin.minigame.pro
www.brainflick.ai
www.pollinate.work
resume.potateros.xyz
twentyideas.com
ktimes.app
twentyideas.com
talbotracing.ca
twentyideas.com
juhispeaks.com
account.snappyxo.io
amanjamin.com
jcysu.com
www.hughedwards.dev
staging-www.masterytrack.twentyideas.com
odyssee.jp
extendedu.org
abdyaqbi.fun
www.vertices.co.za
listus.app
io.deeploop.com
dealertouch.app

Certificate

The complete raw certificate details for twentyideas.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMXNpucJ1EVuNi6sgnVh
PnLNGWDAPcdOA2wfqycvQrSCgahc7+ZOm1qqckInRWKS0OYsCndIL/DEJgeYTInr
ZYHZKeW551nHx4E34o1cKnUR3fFqVNCrOo1biixpyCXHf18bhmweJg64Z1yW6Bj0
1mXBxpsONLOg2kZG+RChOlu5ienCn7EWrtcT2oo0CL8huzNRoqbXG75LfsrE2ej1
9BoXCUpQTB7hyMiqMD3Pkm/2mF76o5vP08usqbgEpAq4nGu4GkGro5mhq/+tAMvl
+vn15xooGa2Ig8c9/UnRXkiSmowefMpPn/MjCrgFBP2pTGsdStyTPX0IKsQA1YkP
mQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 328453643478596223489702805757930754251650
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-07 13:57:06 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-05 13:57:05 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'twentyideas.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20800622470843120774911018957723038702324283495728553299476086861351915910153985266025602738957150101983361416843850633372739958500657026210430202436874785006303900672346487472203981283056624055717958276041594809717649895298168381786586522911738398805754582694889963213597916608436466325234759956060819895920700573353529933907172867872447813194021467706753415479614023057919154963143027258776977605389939007295582804609964816611690295532501597338500512271734664817251776618095420307587527766278477694638362344725161891250199922828596012977485625961142379573171630903713022973032583915232884106474240757638312311197593
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ed0fe5d49c617e9787a9cd5d5fec43101fba1109
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twentyideas.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000186bc93776b00000403004730450220789c0a7ded6209f693fd8b3d32a9f17fbdbca5b33996854669299728de659f59022100994840d26b8886fdd87305dfd4cba88b81b3abc347c7a143bbaae8958786a1ca007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a00000186bc937777000004030047304502206031d16f26f8a97e5e115aea225f34e4440474c50ef62e8e1f185102339bf7e7022100fb76b9b755b1064c99e86f9efdc30e0de131dc8f3598d0ef8107493330c58303
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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