comical.tv
Issued by R3
About this certificate
This digital certificate with serial number 03:b0:22:ce:29:2a:b4:8d:27:67:c3:2b:5f:c6:64:3f:3c:2b was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=comical.tv
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:b0:22:ce:29:2a:b4:8d:27:67:c3:2b:5f:c6:64:3f:3c:2bSerial Number (int): 321272818573337709345308204384808117156907
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 44:23:c2:0b:f3:80:21:1c:74:18:23:c5:03:09:36:3a:8d:81:50:1c
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 37:8e:56:3c:86:dd:dc:a1:bb:4b:01:3e:63:9b:65:78:f5:99:25:f9
Fingerprint (sha256): e3:03:4f:4a:56:7b:3b:1e:b3:2c:09:5c:60:27:60:34:67:88:19:14:87:6a:ad:8d:50:11:2d:f4:3a:f4:75:93
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate comical.tv
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for comical.tv
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
comical.tv
www.comical.tv
www.comical.tv
Other certificates including the domain name comical.tv
(limited to 100 certificates)
Certificate
The complete raw certificate details for comical.tv in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF8TCCBNmgAwIBAgISA7AizikqtI0nZ8MrX8ZkPzwrMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzEwMjgwNzAzMTBaFw0yNDAxMjYwNzAzMDlaMBUxEzARBgNVBAMT CmNvbWljYWwudHYwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDiXwe3 hyVSdzs59iCSlV1Er7vDaTVxoItTA+Xk37+yXXs8eqjRov5VVdg6H4NATUMdyEbU HeR5lSx6BKpOMBniTa5DfIPRCyLCpxUIvhBfoPyShMrPI13UQ1eje6HVjXEEFGwo quoRa5ewd7tGLTWso9rFx+xlHnLiK1nuUV5bfnq7xQaKNc981EfilSxluuEb8Dxj o6gtt7JroA/L4j2yQ9RctjqL8SO4e3zTs5pfjP7cYUNdW64Uhm4a29cqNGb5FNAr w9Gg9jr93yRT1oUdoee/k/7/uqMGgwxFqS0ER2hhawTMlYwbcI3oDWlLrycyPWvt zx13x02fbkQG94VfKGb2gHd0Ze48CPEW4mRksibxuYITCQhsVZMkfZq6nu4hpoNl yP7WdxRldOfCCyIX9mwjQbRZ3kAPYu2IJInBVngqLhb2K6qNi/zxxWqG+uag0JJe WCFRsSEUm/gk43XSsvpcrnpUfZytlnjSX8FQdbL6LPyJr3Ui56xjg46BYDJteaTZ Squxo3GNdkVxrasv+l5bEBuV8mfyS05YaM7iu4cpXSW7r4K5Ug4W/os2zeMBzaRK oHUxabwzBwADH939P6wPalzfCgmw1RVRXhjLWlpFazJgtyPY+x3pbgWVjFz5v4FC vmhP4gelpXOxFUHGVsbWpWLv/gNTtBj46gGAHQIDAQABo4ICHDCCAhgwDgYDVR0P AQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMB Af8EAjAAMB0GA1UdDgQWBBREI8IL84AhHHQYI8UDCTY6jYFQHDAfBgNVHSMEGDAW gBQULrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUH MAGGFWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3Iz LmkubGVuY3Iub3JnLzAlBgNVHREEHjAcggpjb21pY2FsLnR2gg53d3cuY29taWNh bC50djATBgNVHSAEDDAKMAgGBmeBDAECATCCAQQGCisGAQQB1nkCBAIEgfUEgfIA 8AB1ADtTd3U+LbmAToswWwb+QDtn2E/D9Me9AA0tcm/h+tQXAAABi3VO9hoAAAQD AEYwRAIgKwguGbbPw9Zs+DCE5nhp2cwplCTLUSo+Dy39bou/CaMCIG16liG0tLw/ Y0FN+wBRSDj0PtNjJAjEca/7IS0LuaEhAHcA2ra/az+1tiKfm8K7XGvocJFxbLtR hIU0vaQ9MEjX+6sAAAGLdU72KQAABAMASDBGAiEA1+L+r2vqJhprzUY4EBCgLvzh wXsCku03QxLaUA7d0wQCIQDghvgf0313gMOhta5r9et1r9Y1IyHnDVFeY70JOwaL HjANBgkqhkiG9w0BAQsFAAOCAQEAC5pv5t8vrDyuC5/m+TaEllbG+qLD912hIzHL XyIfoKlv6YGs8QzvWFuLG+GaelhK23/Wu9ZBq32ssr/Y/wuLL/kapcv38GUhwwRQ cLVli0oPpEmY2GbyQm5Ikhx4XrasglZSzj8H3Tggr7N92ehQxYIGwuKml/ryMueV dlA65vSFa1OgEr07peVeMakL3nWY4JQwcQAZpD+8+IUQoxPDlhWhRogaMUV37GYp KRj841g1qJeIdqdFaN058uFAJ0y71sTijLwtgEvMJBDyhPJQx5caWilWfCNqgMjc xsDrIuqrPydxFFbTKkmVPpRbXQfrQeelKFMmeG0Lj18aoxT3cQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA4l8Ht4clUnc7OfYgkpVd RK+7w2k1caCLUwPl5N+/sl17PHqo0aL+VVXYOh+DQE1DHchG1B3keZUsegSqTjAZ 4k2uQ3yD0QsiwqcVCL4QX6D8koTKzyNd1ENXo3uh1Y1xBBRsKKrqEWuXsHe7Ri01 rKPaxcfsZR5y4itZ7lFeW356u8UGijXPfNRH4pUsZbrhG/A8Y6OoLbeya6APy+I9 skPUXLY6i/EjuHt807OaX4z+3GFDXVuuFIZuGtvXKjRm+RTQK8PRoPY6/d8kU9aF HaHnv5P+/7qjBoMMRaktBEdoYWsEzJWMG3CN6A1pS68nMj1r7c8dd8dNn25EBveF Xyhm9oB3dGXuPAjxFuJkZLIm8bmCEwkIbFWTJH2aup7uIaaDZcj+1ncUZXTnwgsi F/ZsI0G0Wd5AD2LtiCSJwVZ4Ki4W9iuqjYv88cVqhvrmoNCSXlghUbEhFJv4JON1 0rL6XK56VH2crZZ40l/BUHWy+iz8ia91IuesY4OOgWAybXmk2UqrsaNxjXZFca2r L/peWxAblfJn8ktOWGjO4ruHKV0lu6+CuVIOFv6LNs3jAc2kSqB1MWm8MwcAAx/d /T+sD2pc3woJsNUVUV4Yy1paRWsyYLcj2Psd6W4FlYxc+b+BQr5oT+IHpaVzsRVB xlbG1qVi7/4DU7QY+OoBgB0CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 321272818573337709345308204384808117156907 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-28 07:03:10 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-26 07:03:09 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'comical.tv' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 923513970169113534346319457995823123506373897362691895169198172863665159115686458274524553239208040155589560661092988957003509348766379323414324102822522019953582342543854032773667093296096432184124622183957827805103723242635240097591151698666672610291257858373335601993512236934091766466458002437770681370780205988783256090819702938731181637016510914874894601197637240029475025273837824621188795201626924255134509512845194896781735693014533363192322676388276267184603640758192751854324936354287097740628643720417870185979083611592198458312845130743839199445766985320166616862761701761931340333279039431803615154835857471524148294175368601291802280708156109780768213982385908650361891738735385202068790036369962091027344132416969300021087536943716725499527746083699500296472221763223898339615590826619236222577174479285430669587114475762118655193278560133503681654561455588425935288552311232498686383782604362903642302039885631963807034177803490965866232520963714752972234501045164074509229236331690162633832145955580264823921959430386370806972868748486521095194965609976315244218632906818455714311929748469550130190827297559682481467099295613572156505991552088668498780238264299850590532175431581487599054626988175477811074027323421 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 4423c20bf380211c741823c50309363a8d81501c . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comical.tv' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.comical.tv' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f00075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018b754ef61a000004030046304402202b082e19b6cfc3d66cf83084e67869d9cc299424cb512a3e0f2dfd6e8bbf09a302206d7a9621b4b4bc3f63414dfb00514838f43ed3632408c471affb212d0bb9a121007700dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018b754ef6290000040300483046022100d7e2feaf6bea261a6bcd46381010a02efce1c17b0292ed374312da500eddd304022100e086f81fd37d7780c3a1b5ae6bf5eb75afd6352321e70d515e63bd093b068b1e . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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