bookself.app

Issued by R3

About this certificate

This digital certificate with serial number 03:de:5a:16:e2:fd:84:de:ee:c5:a0:e0:57:9d:1a:29:73:45 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=bookself.app

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:de:5a:16:e2:fd:84:de:ee:c5:a0:e0:57:9d:1a:29:73:45
Serial Number (int): 336999292605791026095293620751058323731269
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 0d:41:42:dd:ac:81:4c:71:7c:32:f2:cf:64:11:9e:81:8a:dc:db:f6
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 97:43:4d:e2:b8:13:bd:9d:f3:dc:d0:f6:13:0d:9a:18:6b:bc:cc:c2
Fingerprint (sha256): e1:58:04:fd:d7:1a:4a:64:d8:59:d1:71:98:22:16:9b:9e:78:9f:76:59:03:4d:88:a9:4b:47:82:04:2e:f8:4d

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate bookself.app

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bookself.app

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.bookself.app
bookself.app

Other certificates including the domain name bookself.app

(limited to 100 certificates)
www.emilylau.tk
www.hitefy.com
devamin.xyz
bookself.app
dev-games.loophereandnow.com
go.bookself.app
www.bookself.app
www.sit.cl
go.bookself.app
bookself.app
bookself.app
bookself.app
go.bookself.app
www.bookself.app
profile.bookself.app
bookself.app
cgscope.co
www.bookself.app
www.bookself.app
go.bookself.app
bookself.app
bookself.app
sic.camaramucambo.ce.gov.br
go.bookself.app
www.bookself.app
bookself.app
bookself.app
profile.bookself.app
*.bookself.app
bookself.app
bookself.app
go.bookself.app
bookself.app
go.bookself.app
profile.bookself.app
app.alignedorgs.com

Certificate

The complete raw certificate details for bookself.app in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1CPFSU/CiDTkgtc3R7X/
h2Yo5Itp7mciBWx8ypEBsQ74Lr47LA8YHCpEEm2MOrO8n2KNDzfIHvlTXF7DJgIg
Ky/oRICqtM1u+i8w6Le+1aCYmk9lIKs32W2x4MHcSDykp2thMvrpsj5p6b0q6XuD
CRaRDmGdKU8zllQjkhIPFd1GHP5admSjAjvuBMJq/Leuqghf2ZBTHH01JYj4saIG
3jhTdKH/nVTzMF5aPnYBUhhPTCQT0tpV9WjP9Ip6QGw+z5ImkwXo+SrYhdi/5fSj
vazxIWMFTzNl/sG2cK9MSaIaGYGJKB7pjBx19KGX+HVdao2D1nVxTSTbeo+s6HrS
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 336999292605791026095293620751058323731269
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-17 17:41:36 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-16 17:41:35 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bookself.app'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26780159817688656954031453020998852298772232578036989138694991034184615668808771889932251226529460961944954460623275202674885683350988030892007282066563480576315113416191386976260877162319105470512949953682539897020859631082266054273281342390736493861167539743070708946314479144736366810258001845032838608142418695281410796772385601850258093047190315567064123711756315968367859620697639026615376799566668507814302111829521345598514721948430725431038195967552555904232993520906573982083847725681736853540619809032773543907848583018476865834585111179254752629318355315305965570254297317397701231944815251140186482594389
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0d4142ddac814c717c32f2cf64119e818adcdbf6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bookself.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bookself.app'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018eed5d467c0000040300463044022035124ee17ce5b79ceec41d66ac283ae5a4fe439e2cdff1dba90329210ca2644902203d08b727c2f3a4b05d222d77c13f9c6f70219d6732ea0d4237df46ce8efabb51007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018eed5d4e4f000004030046304402205ab1315ff00cf6f78c04c9706c615dff4e834ea7ce32062ad914a5938dcb35e702202322a81881a062354310e47ba13430dc23b5c76f54a5c6b5bfec75e42bf2a5f9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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