indioroofing.com
Issued by R3
About this certificate
This digital certificate with serial number 04:a2:8e:91:cf:22:b2:b1:b2:d2:c0:88:8b:80:53:16:33:16 was issued on by Let's Encrypt.
With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=indioroofing.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:a2:8e:91:cf:22:b2:b1:b2:d2:c0:88:8b:80:53:16:33:16Serial Number (int): 403764394627886811908988722083774323897110
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: ce:8b:f1:32:c9:30:18:df:44:b9:eb:34:a6:72:6e:a5:88:b4:99:55
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 53:43:2d:6e:f4:79:00:20:72:44:93:b3:80:a4:69:6d:9c:d0:c5:f4
Fingerprint (sha256): ea:dd:ca:84:38:7f:d9:98:53:2e:9c:d1:b8:2b:be:83:b7:80:6b:15:e8:4f:5d:6b:4e:0a:2b:47:a9:23:91:31
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate indioroofing.com
6
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for indioroofing.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
baldwinhomebuyers.com
christiansincrisis.com
indioroofing.com
internetmarketingclassroom.com
process-servers.com
saboutiques.com
christiansincrisis.com
indioroofing.com
internetmarketingclassroom.com
process-servers.com
saboutiques.com
Other certificates including the domain name indioroofing.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for indioroofing.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFYzCCBEugAwIBAgISBKKOkc8isrGy0sCIi4BTFjMWMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDAyMjAyMTUwNDBaFw0yNDA1MjAyMTUwMzlaMBsxGTAXBgNVBAMT EGluZGlvcm9vZmluZy5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDRnIzk1OKwrzp4i87Jj47pf5P6iimYc0yET7FyYvuqaB3PuOMdFRb8doNfl4yf AsfEUXgvQE4gGZZNSTs1ioZUcgueXS6c2MmYLNSWg9j1fRhIlw1aRK3QAqwTgSu0 PoRSw48i8IVNZ6T+680u5KzpUxEprZZ4LFt+xeFaoNK8Vg/wNP/gcBscHygh5OPo tUncmo8KJnGthptJrfe2v1jVUJSHaFPBufD2P7vtjCnkNEljhNxdFacTdyg0TuGn 0O60s4wojPWMiwvIDXBXMOymvunykBzS88MGfcH6zmJU6+xn8H6u+tFuj3FDr5Vt GDiOD027vFbkSW4Ow32ryGNTAgMBAAGjggKIMIIChDAOBgNVHQ8BAf8EBAMCBaAw HQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYD VR0OBBYEFM6L8TLJMBjfRLnrNKZybqWItJlVMB8GA1UdIwQYMBaAFBQusxe3WFbL rlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0cDov L3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5jci5v cmcvMIGSBgNVHREEgYowgYeCFWJhbGR3aW5ob21lYnV5ZXJzLmNvbYIWY2hyaXN0 aWFuc2luY3Jpc2lzLmNvbYIQaW5kaW9yb29maW5nLmNvbYIeaW50ZXJuZXRtYXJr ZXRpbmdjbGFzc3Jvb20uY29tghNwcm9jZXNzLXNlcnZlcnMuY29tgg9zYWJvdXRp cXVlcy5jb20wEwYDVR0gBAwwCjAIBgZngQwBAgEwggECBgorBgEEAdZ5AgQCBIHz BIHwAO4AdQBIsONr2qZHNA/lagL6nTDrHFIBy1bdLIHZu7+rOdiEcwAAAY3IttDv AAAEAwBGMEQCIHixRCKIU3DAEKnSSJmxFvZdZisQQNcs03j4755WNqjYAiBEMtlA w61Yblny6wOnCw3l0WTXMo2xYBDCfVeRmvxNtgB1AHb/iD8KtvuVUcJhzPWHujS0 pM27KdxoQgqf5mdMWjp0AAABjci20VUAAAQDAEYwRAIgJC5n+8dfSDRm9KNUFwWn 3K83xSg63pXNsM52MvjN5yQCIF/4tTMxm/EssHZzmV4vqL1byDhMHBQ771k6oIlE tOivMA0GCSqGSIb3DQEBCwUAA4IBAQAK9WwryKbwVvjzUbh+NEYzl5hSaiEljZkP iG/ub/M/e3aCVAQfMTlNvbSG2AcjsUulleg+J0j0moCWvTzwIU5m7mugVlh+8yWM eD39veN6Lj8/UkZDFHPGexbLAYxhPxfhA04BC3sopStdyD9rdhFZHqVc6beXLrHi s4WVCk7k1rF+7VRox1ub+kebTSu2aVKLR96a2PmCB10dzCvZ9rVX8UspNa+k1tfk BKNNJ1TTop150IT+wqBBYmmxgOpjRO+8ahs9CJz56rviIswXPi6kI3x/9O6IbM9w cYPZB1LfkpZYrWRo/2ADR1RdCh6O9A44uxr61dsYRwigaogTGPuU -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ZyM5NTisK86eIvOyY+O 6X+T+oopmHNMhE+xcmL7qmgdz7jjHRUW/HaDX5eMnwLHxFF4L0BOIBmWTUk7NYqG VHILnl0unNjJmCzUloPY9X0YSJcNWkSt0AKsE4ErtD6EUsOPIvCFTWek/uvNLuSs 6VMRKa2WeCxbfsXhWqDSvFYP8DT/4HAbHB8oIeTj6LVJ3JqPCiZxrYabSa33tr9Y 1VCUh2hTwbnw9j+77Ywp5DRJY4TcXRWnE3coNE7hp9DutLOMKIz1jIsLyA1wVzDs pr7p8pAc0vPDBn3B+s5iVOvsZ/B+rvrRbo9xQ6+VbRg4jg9Nu7xW5EluDsN9q8hj UwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 403764394627886811908988722083774323897110 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-20 21:50:40 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-20 21:50:39 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'indioroofing.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26461003600926263777235418014560888122573673217925655515392843849419218923837038773611516362503341710750205149678785365596873350992096039650976948745855915616552120915737220250125045437189702225811858056419241121085556351753260468986910424681416059809952155009100931832583392507321793976363643308292304148954131929849761195342197116223112333520076147167569126258925132509955709113318604885370670985510561992095293501158425927189055763618131843598682751293699330247294873233562169756296326767832203887542566460555219643881822182813830236856647406402729252915608982160389431055369619274655954495846043327596990801929043 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) ce8bf132c93018df44b9eb34a6726ea588b49955 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (138 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baldwinhomebuyers.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'christiansincrisis.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indioroofing.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'internetmarketingclassroom.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'process-servers.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saboutiques.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes) 00ee00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018dc8b6d0ef0000040300463044022078b14422885370c010a9d24899b116f65d662b1040d72cd378f8ef9e5636a8d802204432d940c3ad586e59f2eb03a70b0de5d164d7328db16010c27d57919afc4db600750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018dc8b6d15500000403004630440220242e67fbc75f483466f4a3541705a7dcaf37c5283ade95cdb0ce7632f8cde72402205ff8b533319bf12cb07673995e2fa8bd5bc8384c1c143bef593aa08944b4e8af . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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