lelawyer.com.o3technologiesinc.com.helmetcameras.org
Issued by R3
About this certificate
This digital certificate with serial number 04:f2:0e:6a:b0:1f:0a:66:13:7d:c8:02:67:dd:14:24:5a:76 was issued on by Let's Encrypt.
With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=lelawyer.com.o3technologiesinc.com.helmetcameras.org
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:f2:0e:6a:b0:1f:0a:66:13:7d:c8:02:67:dd:14:24:5a:76Serial Number (int): 430816639669479469791794752142746249878134
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 1c:78:af:44:b7:e0:a0:b4:b5:e3:ad:f3:09:65:87:84:f4:9d:3d:e2
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): d7:26:08:41:1f:ac:cd:fb:87:49:c6:0a:e7:9d:71:9d:dc:54:86:61
Fingerprint (sha256): e0:61:9b:d4:26:56:0b:b1:eb:80:84:ba:1b:ac:12:ee:b9:e4:d6:c4:91:35:0c:99:9c:33:db:37:61:39:2f:35
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate lelawyer.com.o3technologiesinc.com.helmetcameras.org
8
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for lelawyer.com.o3technologiesinc.com.helmetcameras.org
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
afy.co.in
bigdaddy.enterprises
lelawyer.com.o3technologiesinc.com.helmetcameras.org
minindo.com
montep.com.zenmagnet.com
probasketballjerseys.com
spamin8r.com
suitforvip.com.iamzara.com
bigdaddy.enterprises
lelawyer.com.o3technologiesinc.com.helmetcameras.org
minindo.com
montep.com.zenmagnet.com
probasketballjerseys.com
spamin8r.com
suitforvip.com.iamzara.com
Other certificates including the domain name helmetcameras.org
(limited to 100 certificates)
leaselock.ca
helmetcameras.org
allanblock.ca
balmorallaw.ca
leaselock.ca
balmorallaw.ca
balmorallaw.ca
alexjonesexposed.org
balmorallaw.ca
leaselock.ca
balmorallaw.ca
usc.mba
romanian.bible
advocates.club
justwanna.world
sculpit.band
real.finance
homeschooldiploma.org
leaselock.ca
webchannel.cc
gardenbench.org
hydratight.ca
allanblock.ca
allanblock.asia
balmorallaw.ca
webchannel.cc
helmetcameras.org
impossible.ca
helmetcameras.org
lelawyer.com.o3technologiesinc.com.helmetcameras.org
shop.kenyan.bible
real.finance
gemaling.ca.darma.vc
theacluvamerica.org
advocates.club
real.finance
leaselock.ca
helmetcameras.org
allanblock.ca
balmorallaw.ca
leaselock.ca
balmorallaw.ca
balmorallaw.ca
alexjonesexposed.org
balmorallaw.ca
leaselock.ca
balmorallaw.ca
usc.mba
romanian.bible
advocates.club
justwanna.world
sculpit.band
real.finance
homeschooldiploma.org
leaselock.ca
webchannel.cc
gardenbench.org
hydratight.ca
allanblock.ca
allanblock.asia
balmorallaw.ca
webchannel.cc
helmetcameras.org
impossible.ca
helmetcameras.org
lelawyer.com.o3technologiesinc.com.helmetcameras.org
shop.kenyan.bible
real.finance
gemaling.ca.darma.vc
theacluvamerica.org
advocates.club
real.finance
leaselock.ca
Certificate
The complete raw certificate details for lelawyer.com.o3technologiesinc.com.helmetcameras.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgISBPIOarAfCmYTfcgCZ90UJFp2MA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzEyMDgxMzAyNTJaFw0yNDAzMDcxMzAyNTFaMD8xPTA7BgNVBAMT NGxlbGF3eWVyLmNvbS5vM3RlY2hub2xvZ2llc2luYy5jb20uaGVsbWV0Y2FtZXJh cy5vcmcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx9V5f3hVmYLn+ 2aiXhOC0tGm9pAkrrITsdo1Ym97PNx/WXB1AZ9c3pxXOBi0tqqKqFHU4E2T7fxWe MUo0z2kWhznB+qZAqpZMi9D7L9oGRWpF38lBFWgqfY9mgRhoFqrm1oYstoO7rlZ3 gRd+UagJOo6yFk9X1IcR1HqNxXtPry+i6x8OOySGjOqkhZDmsiu1VJrcnIj+Yk05 S5RF5K9bwCBjq746BwyDJAJXWrXtuGd5/CYbuw4guAaykoaecl8LkAcVI5ILFE1G AahtJTHSJryEsMoutumvaXw0c1j1ZRLHyNiSPwMiL2tBOfFCaxQMi5iXZfleu5Hq 5VjH20OFAgMBAAGjggLGMIICwjAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYI KwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFBx4r0S3 4KC0teOt8wllh4T0nT3iMB8GA1UdIwQYMBaAFBQusxe3WFbLrlAJQOYfr52LFMLG MFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iu b3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5jci5vcmcvMIHNBgNVHREE gcUwgcKCCWFmeS5jby5pboIUYmlnZGFkZHkuZW50ZXJwcmlzZXOCNGxlbGF3eWVy LmNvbS5vM3RlY2hub2xvZ2llc2luYy5jb20uaGVsbWV0Y2FtZXJhcy5vcmeCC21p bmluZG8uY29tghhtb250ZXAuY29tLnplbm1hZ25ldC5jb22CGHByb2Jhc2tldGJh bGxqZXJzZXlzLmNvbYIMc3BhbWluOHIuY29tghpzdWl0Zm9ydmlwLmNvbS5pYW16 YXJhLmNvbTATBgNVHSAEDDAKMAgGBmeBDAECATCCAQUGCisGAQQB1nkCBAIEgfYE gfMA8QB3AEiw42vapkc0D+VqAvqdMOscUgHLVt0sgdm7v6s52IRzAAABjEm9Ai4A AAQDAEgwRgIhAKEP/f4wyATpJR2zsNXAfR0xcLj/FMfmy3bZniDdsQnCAiEAwxZN 4uequFsJbHr/oFIrMIAocA0zsZ1+qgBOSs05P0QAdgCi4r/WHt4vLweg1k5tN6fc ZUOwxrUuotq3iviabfUX2AAAAYxJvQIyAAAEAwBHMEUCIALK4FO+MCrcLE1itop6 MjS41UqKyqkGFswr6ML6IkiKAiEAl2Frnz1AH++TlxOsg2gFekwqNmZ0S4jpkPYR JdqfrlIwDQYJKoZIhvcNAQELBQADggEBAEbXvmUMofEq+YWDlsFHE5Z2o4OF3Ler dvpmoH6RANwCQ3v3YCM44cuJ2/10Y7zT4uZc2lt8H2f3TpMnDWfnmPrDysNjn8L7 Dk2SKvIbWp7k3X1fAG2WTgN0wyhohthr9tMOkarv5jLdsIP/M7neuBmnyLDj6ayL P63wmNBNr1VVrcw0o57PSk9oVwh/1Lld80GBWONE1wIX3XgzZ0zKvUX0/+/xQRUj 9ddiurQL/333O6ArdJ0XmvSriefR15MrGpDlLzHytxBUQ8zkpu20AJd3VR/jLMBf 6icF+4rZ3EW3u5HHWaIafxlmV5G5DlM/nRUpD/TLdbH4LDMaMTcLntM= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfVeX94VZmC5/tmol4Tg tLRpvaQJK6yE7HaNWJvezzcf1lwdQGfXN6cVzgYtLaqiqhR1OBNk+38VnjFKNM9p Foc5wfqmQKqWTIvQ+y/aBkVqRd/JQRVoKn2PZoEYaBaq5taGLLaDu65Wd4EXflGo CTqOshZPV9SHEdR6jcV7T68vousfDjskhozqpIWQ5rIrtVSa3JyI/mJNOUuUReSv W8AgY6u+OgcMgyQCV1q17bhnefwmG7sOILgGspKGnnJfC5AHFSOSCxRNRgGobSUx 0ia8hLDKLrbpr2l8NHNY9WUSx8jYkj8DIi9rQTnxQmsUDIuYl2X5XruR6uVYx9tD hQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 430816639669479469791794752142746249878134 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-08 13:02:52 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-07 13:02:51 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lelawyer.com.o3technologiesinc.com.helmetcameras.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22465175770041129577338031094627241858463190547361773294951430264515489654543255803655534261284896761813756836640939697272120382359851201908944006169014777149868265525832442115946196375520739618298844064477756096060923015951155980686088029408522347217125807890181383590093013647334430572031164403229510229601959407633127852958999098419959732487785876533880998644914307795020761028143406489785956110772812911571166135570880206063274035729714132772963550251470917102354484805580854595160472374333734739771914703052013726861337817168235763988721035310077983270311002947372989188219434118851518473052945056854371852829573 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 1c78af44b7e0a0b4b5e3adf309658784f49d3de2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (197 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'afy.co.in' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bigdaddy.enterprises' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lelawyer.com.o3technologiesinc.com.helmetcameras.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'minindo.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'montep.com.zenmagnet.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'probasketballjerseys.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spamin8r.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suitforvip.com.iamzara.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f100770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c49bd022e0000040300483046022100a10ffdfe30c804e9251db3b0d5c07d1d3170b8ff14c7e6cb76d99e20ddb109c2022100c3164de2e7aab85b096c7affa0522b308028700d33b19d7eaa004e4acd393f44007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018c49bd02320000040300473045022002cae053be302adc2c4d62b68a7a3234b8d54a8acaa90616cc2be8c2fa22488a02210097616b9f3d401fef939713ac8368057a4c2a3666744b88e990f61125da9fae52 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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