kingdomville.com

Issued by R3

About this certificate

This digital certificate with serial number 03:7f:f9:dc:9c:87:30:82:47:3a:c9:f5:a5:27:c7:f1:04:84 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=kingdomville.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:7f:f9:dc:9c:87:30:82:47:3a:c9:f5:a5:27:c7:f1:04:84
Serial Number (int): 304884841645265959400438328654007077241988
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e1:ab:b4:54:4a:f3:14:ea:47:50:63:38:e2:5e:89:75:8f:b7:16:6d
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 08:91:29:66:de:40:84:8f:66:20:fb:c5:f9:70:81:a1:d6:8e:f1:33
Fingerprint (sha256): e4:a5:d4:79:26:c4:12:44:19:ef:45:09:f6:00:12:74:41:44:55:b3:34:b5:18:0d:82:28:4d:84:5a:2c:ae:6d

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate kingdomville.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for kingdomville.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

kingdomville.com
www.kingdomville.com

Other certificates including the domain name kingdomville.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for kingdomville.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 304884841645265959400438328654007077241988
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-22 05:07:06 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-22 05:07:05 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kingdomville.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 699998379572223073506936231423094851288488211774397596969489964793611943880133071306751091406578863131450198728032712769172137920381370302372432605171748823156832276891484536369551038858889054516167262412734832804816613556305647257580085868033346950208366610572556940714893777813512031793064395414816308620486656908837953903400783070504871683450462501673540427739698125586146982872087753471312334152992107275052914501886114475713258488445891314656991896358192287160269651978179705985872641909868511117377365573893202458664361490677207185334957998527317810158373324294389699719578833509848312865368918877815891815540070474888451897028779028312002259257521934351407961831233414443987671846889434925829743510789615171252971767614384538599310973481782155041554897246668560022765108392878261186281922006428681694468046277835685981512016800469321577909263096444025264038897768675316305585945417168979428291594781469932049400905635648808833115226559295984629581131702683253435701709159311391754046116898937881271720862394968518566461099612515113406154512271649938617551394934827831449337688148844693343451728658185186574148047756284071629027985030078514956298537841401522016532629257806368422028084097197545629563971185808421689886367022991
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e1abb4544af314ea47506338e25e89758fb7166d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kingdomville.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kingdomville.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018dcf6cbea30000040300473045022100a38453b8f21bb59982013dd5fe0d038867c63cd6848d38186da9094b78001a8802205ac8d15d3ff942aea4694883db92b71aa62b4c003757144e3780a42fc33a7d65007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018dcf6cbe85000004030046304402202df4f815a0fc67eab14c469956e6d33414a82aa0922ce58becf60288a5af9267022025dec9c0369de4d62510b8ef6224820c5b653ba6b9aed47a4707b16e41eafb13
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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