recreationalpsychedelics.com

Issued by R3

About this certificate

This digital certificate with serial number 03:27:dc:1a:56:4f:23:d9:b1:0f:bc:33:d0:70:de:1d:6b:27 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=recreationalpsychedelics.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:27:dc:1a:56:4f:23:d9:b1:0f:bc:33:d0:70:de:1d:6b:27
Serial Number (int): 274900437014545689313566760166012013603623
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 7d:2e:bf:2b:d9:d0:91:a3:ef:7a:8b:ef:da:c8:56:f9:1e:76:3d:f7
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 92:6b:c1:83:9a:dd:d6:61:5b:71:84:de:05:01:52:86:f3:15:67:4b
Fingerprint (sha256): eb:07:92:6e:d8:f0:b0:33:27:b4:e4:cc:4b:ea:fc:31:61:75:d2:8c:32:ca:1b:08:1c:f5:d3:63:a1:99:4c:1a

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate recreationalpsychedelics.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for recreationalpsychedelics.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

recreationalpsychedelics.com

Other certificates including the domain name recreationalpsychedelics.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for recreationalpsychedelics.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 274900437014545689313566760166012013603623
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-08 10:05:06 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-07 10:05:05 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'recreationalpsychedelics.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 880735231699327828210164043148356682669319280565530120201616525194336867046863860566810480942130812004646094259622952608596065997460236029445961171886727279594400391624776154467594570240590687237586149377492958267935203147525390768770535854496700353829872804810689621685437732267918546421737937552487380772492161439269794653460939847912916485378937931988548838296642956234218505591943903874828015135428871403572999453847365782283013800036817778206120959944079283797394090108271371432817489759211461691947009666219980290753701901878041325973352959393680034326501014722788523334642528737277443357591378961747192524380327456026221016260348781908619035870532829385725138545273759547009828939588614878127071444546046663878393405952565425298748574539171644606761737431057458357492027811560347488390644073490732843205586167232373472381402567028480174178564675928883416063142157493765673204531696898904985387233882519630606968590735621431823514165817260925216086213275338643250485090210404660419477221475297768016663716271689010422044595550923982452333871645056555179191112617213915631905177048196120169891600820277528926922803651047548531359196944212987795101487005186727702332310431938961929141196695197229099574290734673292422143493964943
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7d2ebf2bd9d091a3ef7a8befdac856f91e763df7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recreationalpsychedelics.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018ce8bf66c200000403004630440220247b279d650f03e5845831ca1f209c8f379da9204dc4f3134e951b582667717f022055ca6a076bb120fcbde28be3ac6cd879af278ae56df191e88b5c1604a46731b000750029d03a1bb674aa711cd3035b6557c14f8aa78b4fe8389449eca453f944bd24680000018ce8bf67c000000403004630440220539409403735281456112cc7d0948086960349763288e412be056e27200d555b02203c1b99c040c88e86c9009c460e893f7727e695b872ce61d7783f28351cf5b2d6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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