foot-reflexology.com

Issued by R3

About this certificate

This digital certificate with serial number 04:59:f8:6a:1c:d1:42:be:f8:d0:2f:ac:c0:4f:f4:49:53:d3 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=foot-reflexology.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:59:f8:6a:1c:d1:42:be:f8:d0:2f:ac:c0:4f:f4:49:53:d3
Serial Number (int): 379064473893912985412213906287840203461587
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 4e:2c:7b:14:88:7b:0a:e0:0c:f8:fe:5c:56:5a:9c:c8:dd:59:c6:fe
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): b4:56:58:35:a1:eb:f0:f2:a4:37:e5:d9:bc:53:72:d8:21:28:75:b1
Fingerprint (sha256): e3:ca:b2:69:4e:d6:f3:a7:d3:b9:1f:4b:eb:2e:1d:f9:b9:53:03:17:72:88:b7:8c:33:8a:9b:73:b5:49:9f:1a

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate foot-reflexology.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for foot-reflexology.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

foot-reflexology.com

Other certificates including the domain name foot-reflexology.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for foot-reflexology.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 379064473893912985412213906287840203461587
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-22 21:53:10 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-20 21:53:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'foot-reflexology.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 890280979461250667240091599618996005967456990545229148105570243682656466060636387551048828529952611206910493218360579080706463347255372675523498750728318579588124899235510881117878501312905735997019476737463239353215254051537892237233604286516594461665920470943075067524902004940577150823979486623858181782712422298035522917886944240659946489268743222180183365102986778423781931034888928997021519845736912605127422235995089331514859434690313315666115938687412396196615962410039087526228619068249017828881617241214699712350733311599554934250435731137942479428369645506433165311900815935641678010497909002221901502851175124585938055781220892775327681742537256670079432802702915747777442837894792170454253928809510900199327714315825119685190171298381904410800779903710785062435292106253230792804875468966384035917467366572406768556966630259817648548088211962017855734849288364000995727868382484724882819775184339484464565292712873099114125994465051581482163341541319620710952923495725962715350089753845451817044688246875810730727363803868905456572409519153961288359859820156230882131773947657765205870737640013914182042277234996895796202264197120998418617915156425019690939172418671789775586957859036230969784039463055275905664133471973
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4e2c7b14887b0ae00cf8fe5c565a9cc8dd59c6fe
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foot-reflexology.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018bf93cc1de0000040300473045022100959e1c0f426ea60a7177329e7a537af8f0fadf4aea92a644362812ff26afe3e802207a2150b87e3845ec38f89f480638acf5c723e1f1e45474758e9012964a65a24200760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018bf93cc1e5000004030047304502202b66f2a143e0446282d8d7da3e3b69a6963b829d1f2780d6d53d4442e3c8b60b022100fcfc3757b9792085f0122fc197d401e6d125e955b985f074ec6f05e00fab1695
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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