lia.ng
Issued by R3
About this certificate
This digital certificate with serial number 03:21:16:1e:03:c4:a2:a2:4e:66:09:c6:ce:e0:d3:ac:c8:2c was issued on by Let's Encrypt.
With 19 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=lia.ng
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 03:21:16:1e:03:c4:a2:a2:4e:66:09:c6:ce:e0:d3:ac:c8:2cSerial Number (int): 272595574764911014879747315171505916921900
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: f7:4c:dc:56:3b:93:f1:17:2b:21:4d:9f:80:c0:38:17:97:09:66:21
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 9f:22:3c:92:77:3c:89:4d:99:c9:54:84:a8:19:b1:54:d0:37:e5:0d
Fingerprint (sha256): de:91:93:26:fd:51:8d:da:ff:e2:b0:38:93:a4:56:3a:59:f2:59:94:4d:a9:16:a3:e3:a8:db:bf:60:b8:e7:ed
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate lia.ng
19
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for lia.ng
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
alabamacourt.com
canada4vip.com
graciecollectibles.com
holdemcharts.com
jesewing.info
lemonsolutions.com
lia.ng
michigancitywaste.com
mybanneradmanager.com
quicksilver.silverchampions.com
royaltaxservice.com
selantic-marine.com
sinclairfamily.com
stateelection2028.com
thedirectlender.com
themontanastore.us
whatisanangel.com
withoutpills.com
xn--yt9h.tk
canada4vip.com
graciecollectibles.com
holdemcharts.com
jesewing.info
lemonsolutions.com
lia.ng
michigancitywaste.com
mybanneradmanager.com
quicksilver.silverchampions.com
royaltaxservice.com
selantic-marine.com
sinclairfamily.com
stateelection2028.com
thedirectlender.com
themontanastore.us
whatisanangel.com
withoutpills.com
xn--yt9h.tk
Other certificates including the domain name lia.ng
(limited to 100 certificates)
Certificate
The complete raw certificate details for lia.ng in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGTDCCBTSgAwIBAgISAyEWHgPEoqJOZgnGzuDTrMgsMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDA1MDcyMDE3MTZaFw0yNDA4MDUyMDE3MTVaMBExDzANBgNVBAMT BmxpYS5uZzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAML7teueOlCu Js1tnagHN4mbPN/HFCW5uBpbEz30+mY+YtOcLaZDIbgBfMLW+gHRoZhKgV7Fh991 UjizQYAR+yymkVi7BB39dUTST/9del/jSJ6PlKnVmxwwacylv5yXEa1nDmziie+j xs9AJcmGmrrdRE03lkipiSYh0JGYJV3zU592VVwQ3REKbJROlb+QkpJ9nDHUchDK Ypm5DywsJ6ZOLEIDaN/kwB5mBbiQdxkTebWkyficUljpdK1pjM857KH361b7CV3g O8/vkj7hgOH9ieiPHHTp2hAzyeHoayZxhF4SX+CdvnvDNR1xmD3EvZKODpSRikbw schcpCbNdpMCAwEAAaOCA3swggN3MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAU BggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU90zc VjuT8RcrIU2fgMA4F5cJZiEwHwYDVR0jBBgwFoAUFC6zF7dYVsuuUAlA5h+vnYsU wsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRwOi8vcjMuby5sZW5j ci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNyLm9yZy8wggGDBgNV HREEggF6MIIBdoIQYWxhYmFtYWNvdXJ0LmNvbYIOY2FuYWRhNHZpcC5jb22CFmdy YWNpZWNvbGxlY3RpYmxlcy5jb22CEGhvbGRlbWNoYXJ0cy5jb22CDWplc2V3aW5n LmluZm+CEmxlbW9uc29sdXRpb25zLmNvbYIGbGlhLm5nghVtaWNoaWdhbmNpdHl3 YXN0ZS5jb22CFW15YmFubmVyYWRtYW5hZ2VyLmNvbYIfcXVpY2tzaWx2ZXIuc2ls dmVyY2hhbXBpb25zLmNvbYITcm95YWx0YXhzZXJ2aWNlLmNvbYITc2VsYW50aWMt bWFyaW5lLmNvbYISc2luY2xhaXJmYW1pbHkuY29tghVzdGF0ZWVsZWN0aW9uMjAy OC5jb22CE3RoZWRpcmVjdGxlbmRlci5jb22CEnRoZW1vbnRhbmFzdG9yZS51c4IR d2hhdGlzYW5hbmdlbC5jb22CEHdpdGhvdXRwaWxscy5jb22CC3huLS15dDloLnRr MBMGA1UdIAQMMAowCAYGZ4EMAQIBMIIBAwYKKwYBBAHWeQIEAgSB9ASB8QDvAHUA PxdLT9ciR1iUHWUchL4NEu2QN38fhWrrwb8ohez4ZG4AAAGPVOr6CQAABAMARjBE AiBbIs1Kp8guyYb7UPUI/Jz3x8uyuNA/xXdioFLzoPAUAwIgLj4i/Xf5R/iEaOmv en0bGxN4PZngj06DqYyS7/IB1hAAdgDuzdBk1dsazsVct520zROiModGfLzs3sNR SFlGcR+1mwAAAY9U6voCAAAEAwBHMEUCIGwzswdsSD0sWWuXoJvODsUbLx+kPYvf YY+GCi3drV17AiEAlscfwsrVqMstfnAMCJ6uIK+WzMsPJmjec6rTEpOSCAMwDQYJ KoZIhvcNAQELBQADggEBAKEcu8tqZogpEX7gYp82ChSWFRnCng5RBoSakM+vl39Z kAtIl9cTkPImJU1jLeTz8zoy5oZSF3jMOYy2ZdJPM6Q0vgWUE6saDMqRz0LDiXSY 0OjNzNtp9Zc1VM+JqsQyNKuwMakj9ImesH/A7IxxscB5ovlqL+AzOOEKIsqZUSmH CB898o/g2WhmvkpAmIFJ+jcK/BNI0x2Ga5nUAXi1GIjw8JMZY6e5KECExXL0xyiX 5o35apm2zQh2jZQsnCUYok4tbS+6AjuBx1w+tESpjS4JpH/ipaze/L4uDFCfVDgN P0mJI9DoMtmmIlPhfPwLixogxu+vgxOoo16+l+e0S8c= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwvu16546UK4mzW2dqAc3 iZs838cUJbm4GlsTPfT6Zj5i05wtpkMhuAF8wtb6AdGhmEqBXsWH33VSOLNBgBH7 LKaRWLsEHf11RNJP/116X+NIno+UqdWbHDBpzKW/nJcRrWcObOKJ76PGz0AlyYaa ut1ETTeWSKmJJiHQkZglXfNTn3ZVXBDdEQpslE6Vv5CSkn2cMdRyEMpimbkPLCwn pk4sQgNo3+TAHmYFuJB3GRN5taTJ+JxSWOl0rWmMzznsoffrVvsJXeA7z++SPuGA 4f2J6I8cdOnaEDPJ4ehrJnGEXhJf4J2+e8M1HXGYPcS9ko4OlJGKRvCxyFykJs12 kwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 272595574764911014879747315171505916921900 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-07 20:17:16 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-05 20:17:15 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lia.ng' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24614354299473450976321047838060481252462070403987370449933869822022217232441590483469734539326127088844141561689928297395913099705020864521393343804530994951686769117835575779009706254147313778752013999426031281880802093146450080081948230055579661719045996051185365555819879319879416720714054513169178866751417174577926684117789583565450350079238002100086633409525068321555844546463639742462796396214071031867683338335846878982151484820309622487227088946411475491219975349945683744458728020203559571924602537619159156726076476773895109701189035894689340133772244415675052319266024741322361802845248961737383887074963 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) f74cdc563b93f1172b214d9f80c0381797096621 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (378 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alabamacourt.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canada4vip.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'graciecollectibles.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holdemcharts.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jesewing.info' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lemonsolutions.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lia.ng' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'michigancitywaste.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mybanneradmanager.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quicksilver.silverchampions.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royaltaxservice.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'selantic-marine.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sinclairfamily.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stateelection2028.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thedirectlender.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'themontanastore.us' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whatisanangel.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'withoutpills.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--yt9h.tk' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef0075003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018f54eafa09000004030046304402205b22cd4aa7c82ec986fb50f508fc9cf7c7cbb2b8d03fc57762a052f3a0f0140302202e3e22fd77f947f88468e9af7a7d1b1b13783d99e08f4e83a98c92eff201d610007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018f54eafa02000004030047304502206c33b3076c483d2c596b97a09bce0ec51b2f1fa43d8bdf618f860a2dddad5d7b02210096c71fc2cad5a8cb2d7e700c089eae20af96cccb0f2668de73aad31293920803 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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