pawnguru.org

Issued by R3

About this certificate

This digital certificate with serial number 04:ee:ac:3a:d6:51:15:d4:1e:f6:61:b8:00:b2:cc:7d:24:cc was issued on by Let's Encrypt.

With 14 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=pawnguru.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:ee:ac:3a:d6:51:15:d4:1e:f6:61:b8:00:b2:cc:7d:24:cc
Serial Number (int): 429665279769577033409729487686671124997324
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 0f:76:55:48:e1:b1:1d:61:b3:01:0f:cc:d6:ad:95:2c:e7:6c:c4:cd
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): c7:fa:99:8f:03:ba:f9:5c:44:87:c4:00:cb:54:00:22:64:4b:1c:97
Fingerprint (sha256): e5:dc:0f:21:b5:30:52:0c:42:f4:f6:35:19:1e:98:0b:3d:fe:06:ea:3a:99:a3:ba:69:cb:72:34:4b:0a:99:db

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate pawnguru.org

14

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for pawnguru.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

4hemp.com
ajmerdental.in
elitehelicoptertours.com.luxe4vip.com
garybastianinc.com
marseillecitytours.com
michigancnatraining.com.banchinese.com.hempismedicine.com
mission-loan.com
myinsulinpen.com
pawnguru.org
privateschoolcalifornia.com
rezeptfreibestellung.de.prologodesigns.com
spitfiredesign.com
thanksjeromepowell.com
thebabyauthority.com

Other certificates including the domain name pawnguru.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for pawnguru.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAznqvh27HtwYt3/tabIXx
NxK1RABrXQbrAnnfDLFBNSoopfOA1zfP3O8hakLxj+JgMtGZAkYPbrEY+eOr9Mfd
HgjPb+PIg4ixDSV+Q6+0nKtWnSfU0P1Sa5EMGIzy6sf06xk+LrnCsVWC8tCCStTv
9mO1Pons0WEIXWQJHP4dU9zDyRSKccxG+XnaJTcxiwDTMQJ7DTiXBcK8UTNfsErg
aTdKgXhhK3k9S0rhaRzhjJNNASDGzrxY1OtqGdiUHLVl38+yiaqOkzGCdvXZ0HKi
79DkJLTae+UNBZ3HH+noNFbmO+GzfydgaU7SNchJ669pSlkQeeWQf6zMbZECzZZH
XwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 429665279769577033409729487686671124997324
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-11 00:16:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-10 00:16:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pawnguru.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26065589376908828047669825337717264857413142346283738583716202558295549901822788569151463509946813782261122316496966677582154414002616231006601145853064066026445153034618597695576317239674446511942504351247641294226814729989181851056141361594298799063534538732489103265855832767509046977261227588358732504646036709836455414840706573464748228237052619100310426878693037440137892734396311853765372036704409343818879312625198884485538608217216297928665227719577480488261598429946599192678841487882623123463391158866329046731988752148359347156145736595057546004268624389359313822234815920337292751110764275468359307773791
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0f765548e1b11d61b3010fccd6ad952ce76cc4cd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '4hemp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ajmerdental.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elitehelicoptertours.com.luxe4vip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garybastianinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marseillecitytours.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'michigancnatraining.com.banchinese.com.hempismedicine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mission-loan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myinsulinpen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pawnguru.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'privateschoolcalifornia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rezeptfreibestellung.de.prologodesigns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spitfiredesign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thanksjeromepowell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thebabyauthority.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018c5672227c000004030047304502206de5d1b3c93f1ab0785dbb43cd4f53c26713300cb5cee2f0b0f836fe537c1856022100e1839499caeb492ed20b77cd23f108a08b7e653af7db0740eb127e4e863d295f00750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018c5672250d000004030046304402204f2e7299860808f272b7b978483baa42ac6bcdfd9cc6ef6c6a6e463b05d28c000220198ccbcd40f6554682899f4663cf857629cb39a2e83046054e9d9096dc4cafdc
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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