lia.ng

Issued by R3

About this certificate

This digital certificate with serial number 04:3b:d9:6f:74:4d:aa:81:18:9c:a1:cc:8c:b1:19:7a:82:93 was issued on by Let's Encrypt.

With 25 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=lia.ng

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:3b:d9:6f:74:4d:aa:81:18:9c:a1:cc:8c:b1:19:7a:82:93
Serial Number (int): 368814824554325831097640221499806929552019
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 0a:90:02:97:57:87:af:4d:b7:c7:29:33:db:7a:76:0b:27:99:72:2d
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 6b:02:ba:e4:09:41:93:39:ea:6f:77:0f:a5:6b:12:05:c2:89:b7:04
Fingerprint (sha256): dc:d5:6f:f8:a9:ea:bd:d9:cb:42:57:44:07:e1:7b:e1:3d:53:77:ac:cb:92:4c:be:4e:ab:35:18:29:90:04:8d

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate lia.ng

25

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lia.ng

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

100america.com
ainoemi.com
alluloseisthefuture.com
animatedwebdesigns.com
apopkapressurewash.com
arbitrageprotocol.com
beijing4vip.com
brightmoorrealtor.com
controlpew2.com
daytradefutures.com
dolceviti.net
enerpactools.com
etechmall.org
lia.ng
lifesiteleague.com
onceuponatimeinbrazil.net
pitbullpatriot.com
pushrank.com
pwcvalues.com
queertunes.com
test1.officetarget.com
umiuniverse.com
videov.realbrilliance.net
weallhavecolor.com
wvseo.com

Other certificates including the domain name lia.ng

(limited to 100 certificates)
tablesante.ca
lia.ng
lia.ng
gemaling.ca
lia.ng
stevensvillewaste.com.lia.ng
lia.ng
lia.ng
lia.ng
lia.ng
lia.ng

Certificate

The complete raw certificate details for lia.ng in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5gp0cY6ocuaqPea+GOy
X5ImSD/YtZddvVcPTlygIT0UdC+Ka/27tOcYJS3hQmuO2f1nTgJ4mSP8Tq8phHvI
ttKMXPTQqbTp4p7U5zIUG4KxhsH+kAbKEUZx1codVosD4Jfh1S6h2NuPPzqme7ZI
DAb4cQx8cNlmQibP0uEhEPf67GjoUa/uSKykia1jqMUClbA0pchIF1FCTFoUMT7P
RiVqjai9LPEQBSe1LQDL8gMpxyvLg/p0Jn0ZkcYqfK0zAHy3KULlzsTGYrJ2ZMVm
F81y3LI9sjYPcVQPyK/1jdZEKlV/TQgKQemX4/fJE5UMUUlI8wugTWZ6MoRPP8dJ
eQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 368814824554325831097640221499806929552019
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-15 08:39:35 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-14 08:39:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lia.ng'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24691504016369124539744216103566627240676038149069416756842339257760181606203487132991095262985568663113393504739569757954266285686400057216181792370184036912773715619356377888503552017488185598844730125182094632459595143273212145564693199418596475716452934726255472698601583412738876636027389012361562449958080913144823769862792181732886616254391593749619038566055290830416915097839054705565097187664818423426720222796279194614304895339145869305519009534355990547452464716011498764197994525794345622606514582269259671285850411478926628238349861699261713357209769339066582488569878724342787357159984496194918843631993
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0a9002975787af4db7c72933db7a760b2799722d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (474 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '100america.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ainoemi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alluloseisthefuture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'animatedwebdesigns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apopkapressurewash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arbitrageprotocol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beijing4vip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brightmoorrealtor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'controlpew2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'daytradefutures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dolceviti.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enerpactools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'etechmall.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lia.ng'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lifesiteleague.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onceuponatimeinbrazil.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pitbullpatriot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pushrank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pwcvalues.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'queertunes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test1.officetarget.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'umiuniverse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'videov.realbrilliance.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weallhavecolor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wvseo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca0000018ee12051f400000403004730450220289ad2453a7301bd622c6d5f6c4fca56c0acd8b485cb5cea6eeee246972dcee9022100b27138b1576f6fe7a3003a3a1496892c7844d0c4b38004450e644e58afef6ddb00760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018ee120520e0000040300473045022100cf5c80a74ae9a0d3f2051c9b800180175869003e7ea728214e0804568ac405ee02203906f1102f54e05fefd845be43d1e9b50c723ee75e5fd09907926a9a41c763d3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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