farm2kit.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:3a:5b:46:2b:ca:2c:e8:44:06:13:fe:ca:df:2a:07:fb:f0 was issued on by Let's Encrypt.

With 20 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=farm2kit.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:3a:5b:46:2b:ca:2c:e8:44:06:13:fe:ca:df:2a:07:fb:f0
Serial Number (int): 281194559173253295520474225628057973554160
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d0:5e:e8:6a:35:7c:71:de:52:14:be:3c:d0:b4:36:6b:4b:1c:0e:40
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 94:4f:b5:83:54:e9:33:34:26:65:c6:19:8a:d0:6e:d5:c4:2d:81:45
Fingerprint (sha256): ea:eb:53:bd:a1:32:7a:98:21:4a:01:2a:3e:77:e1:07:59:9e:bb:18:95:39:09:8e:28:b0:85:4c:ef:31:98:46

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate farm2kit.com

20

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for farm2kit.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

australianroyaljelly.com
cardblu.com
chuft.com
dynabelt.com
energylight.com
farm2kit.com
healthywerx.com
lossmitigationspecialist.com
opticount.com
wart-treatment.com
www.australianroyaljelly.com
www.cardblu.com
www.chuft.com
www.dynabelt.com
www.energylight.com
www.farm2kit.com
www.healthywerx.com
www.lossmitigationspecialist.com
www.opticount.com
www.wart-treatment.com

Other certificates including the domain name farm2kit.com

(limited to 100 certificates)
mainestemcellcenters.com
micdropgenius.com
www.amishdisplays.com
georgiastemcelldoctor.com
www.farm2kit.com
www.hotasfuct.com
farm2kit.com

Certificate

The complete raw certificate details for farm2kit.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2rhdwMyZhksn3dK8PyG0
FQzTFc6XI40PSA4RSMagVbWI7+Hvoe08Js7Cj45DMXBpJ/3CfQrmdHbFnoiE9+kx
vb8DOt7iiYCSDVDlgfQt++DE2do7iRwC9iW+7yQ3L0bokNL+lFpHAi3FED+gJWfl
T90nJACAOX3AEatLGXdtElAid20xMTu49oTn9NAS74lKL1CcU9otF9R/Jvnvt8rG
KF6REAksjcjC4bpuJHwr/Oz0NkPqDR/CwxYS09kC/+Z6C8x4xCj39fbRxvrqqGyl
t+niIg8o34K1QO7rXtZNC3dkqUXDP03cj0Cw/v+QukNO6PbtPl66fb1lY2IyRqcL
IwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 281194559173253295520474225628057973554160
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-04 06:12:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-02 06:12:03 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'farm2kit.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27610864855652547845547234017078327817318471155141156770556017317834233990833083661768799402035652377783823382210321007925770209674290712302947768631317526894203833182860937492222214651984115118661578627930142569809868272762666115763366360318757478150302508892666111435556986770002040435210872685078677357213505600187589773508475171166226167060866799442476152440824651708830812949326812368278355720905268704698346100091886087083112794632191305000066969614591494291233040570045900909975549388596502927223193955930323354384316688874083583962788399203123421887924106292448114112546094893558677913286198034595351139650339
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d05ee86a357c71de5214be3cd0b4366b4b1c0e40
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (398 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'australianroyaljelly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cardblu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chuft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dynabelt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'energylight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'farm2kit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthywerx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lossmitigationspecialist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opticount.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wart-treatment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.australianroyaljelly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cardblu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chuft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dynabelt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.energylight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.farm2kit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.healthywerx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lossmitigationspecialist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opticount.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wart-treatment.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016c5b788e2b000004030047304502207a8fa131237afa6300bd04fa0ac58883404d9ee887923270c6aece36b0ee9aea0221009dbba25990aff402637de289eb20a843c8b0c28257fcd925e7d478fd8fe7a71d0075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016c5b788fb1000004030046304402203b19fd4d3d00a0d14b6bfd19447bf73d00a05ba4a8438c938da561b20e2c15a402203b60cba0b994fd05879b91f73fe4a67d9fa73e260964c981873c1a532fed0ea6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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