luxpropertymedia.com
Issued by R3
About this certificate
This digital certificate with serial number 04:cd:05:a0:c2:33:bd:4e:9b:58:8a:49:0c:66:db:e1:24:c0 was issued on by Let's Encrypt.
With 14 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=luxpropertymedia.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 04:cd:05:a0:c2:33:bd:4e:9b:58:8a:49:0c:66:db:e1:24:c0Serial Number (int): 418214509792196348841594266903027208234176
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 2d:ab:e3:6c:d8:92:f2:5b:dd:d5:15:97:3a:bd:62:3a:1a:1f:eb:6e
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): b3:10:e7:9f:28:a5:b3:44:5e:32:dd:63:57:b5:af:43:68:1e:cf:ee
Fingerprint (sha256): eb:4c:48:12:51:89:17:3f:8e:38:0f:43:f6:57:24:fe:bf:3d:b9:8d:4a:10:c1:24:ef:36:c5:a8:36:74:a5:2d
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate luxpropertymedia.com
14
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for luxpropertymedia.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
amsterdamhomes.com
china4vip.com
fantasticsidegig.com
freedomprojectschool.com
glucosescore.com
jobsluk.com
jonrawles.com
luxpropertymedia.com
selectioncodemovie.com
summercampsa.com
txcoastalbend.com
venturekids.com
votemeyers.com
www.canwebuild.com
china4vip.com
fantasticsidegig.com
freedomprojectschool.com
glucosescore.com
jobsluk.com
jonrawles.com
luxpropertymedia.com
selectioncodemovie.com
summercampsa.com
txcoastalbend.com
venturekids.com
votemeyers.com
www.canwebuild.com
Other certificates including the domain name luxpropertymedia.com
(limited to 100 certificates)
donquijotedelamancha.com
usc.college
luxpropertymedia.com
luxpropertymedia.com
luxpropertymedia.com
erate.consulting
thegreenafrica.org
113394.com
veteranscoffeehouse.com.freedomprojectschool.org
equa.life
fuelmax.xyz.luxpropertymedia.com
lia.ng
strutsolutions.co.za
luxpropertymedia.com
shemale.forsale
luxpropertymedia.com
christianmuseumtour.org
usc.college
luxpropertymedia.com
luxpropertymedia.com
luxpropertymedia.com
erate.consulting
thegreenafrica.org
113394.com
veteranscoffeehouse.com.freedomprojectschool.org
equa.life
fuelmax.xyz.luxpropertymedia.com
lia.ng
strutsolutions.co.za
luxpropertymedia.com
shemale.forsale
luxpropertymedia.com
christianmuseumtour.org
Certificate
The complete raw certificate details for luxpropertymedia.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF7jCCBNagAwIBAgISBM0FoMIzvU6bWIpJDGbb4STAMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDA0MjcwMjIwMjdaFw0yNDA3MjYwMjIwMjZaMB8xHTAbBgNVBAMT FGx1eHByb3BlcnR5bWVkaWEuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEAzWEOibeZ8V7D4SCWEWKYJi1O6QdHhE0misBKIcyw38PCzfFN885LB892 X7CUpfxDIQ24jmCSuJeqpC0oCn8WrQTDgypeExbHGNnBu4tzfIvSryZAIiPWXUIU /NM/LzZr9JG5ftIcX/9dFjYhhWBleU8cmyR2iq5MDCITxoJfxSMKLx8GmDXpL1At phHcciWVVe4Rulaw5oqFQKEWpGzC3F8dUGsfcEUoX1dAF448doD2xaUIlCD/cBp9 lVyZua1NFShBkUDfU7ax/StGZ38L3lT3rYt0pkQlfAWcDv/jU00vot0yZScixi4O obsTEbL20UgJK0RSL3dglitIU5XGfwIDAQABo4IDDzCCAwswDgYDVR0PAQH/BAQD AgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAA MB0GA1UdDgQWBBQtq+Ns2JLyW93VFZc6vWI6Gh/rbjAfBgNVHSMEGDAWgBQULrMX t1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGGFWh0 dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmkubGVu Y3Iub3JnLzCCARYGA1UdEQSCAQ0wggEJghJhbXN0ZXJkYW1ob21lcy5jb22CDWNo aW5hNHZpcC5jb22CFGZhbnRhc3RpY3NpZGVnaWcuY29tghhmcmVlZG9tcHJvamVj dHNjaG9vbC5jb22CEGdsdWNvc2VzY29yZS5jb22CC2pvYnNsdWsuY29tgg1qb25y YXdsZXMuY29tghRsdXhwcm9wZXJ0eW1lZGlhLmNvbYIWc2VsZWN0aW9uY29kZW1v dmllLmNvbYIQc3VtbWVyY2FtcHNhLmNvbYIRdHhjb2FzdGFsYmVuZC5jb22CD3Zl bnR1cmVraWRzLmNvbYIOdm90ZW1leWVycy5jb22CEnd3dy5jYW53ZWJ1aWxkLmNv bTATBgNVHSAEDDAKMAgGBmeBDAECATCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB2 AEiw42vapkc0D+VqAvqdMOscUgHLVt0sgdm7v6s52IRzAAABjx2RhigAAAQDAEcw RQIhAIi1KpkD4O5ay6Sj2IHn+1NnfqyS05b/oy4vFvvPnWrNAiA1kxBXE46OsDp6 akUUo4/iVZP8d5evveyHBwrGa6ksDQB2AD8XS0/XIkdYlB1lHIS+DRLtkDd/H4Vq 68G/KIXs+GRuAAABjx2RhnMAAAQDAEcwRQIgISAjm1CSs00SmOxZp5H879XlGanF +NUviCf+8FfaetACIQC2SYe7YaQ0QbK8EGFOgRBDwLAZp3K1yDGdJt0UMFjdYTAN BgkqhkiG9w0BAQsFAAOCAQEAsbhkFiPWGz3Y2Cev9E4YV+wLasjwdR06+GKCoCBS cXNE3NLgOaxX8eXz+i02erJn7I72pVZqDcCt9GRTp55ZczTj/TggwrtZZ+5U58p+ D7NkvErLx4xFF4lSzYbzgivDEYjLCs+Wm8q8haYooc9ZB4LRtvBlmkBYOAjVLhVV UJb7JgUoYIEseEYWzE2oSxgyYLxq5ynUHI2BINnizPgd9q7IBi5gNNAZo+RK2pr3 BYinf2Pab+hMWHFYbwbXnND7OyLxbH54jKXfjj6ZxctM+O5uSy6kYc74nMYlAl4D 2OhQxNgjvgfg0A/gAtOFkTqba+noOZWOjAfIQpePlP9Olg== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzWEOibeZ8V7D4SCWEWKY Ji1O6QdHhE0misBKIcyw38PCzfFN885LB892X7CUpfxDIQ24jmCSuJeqpC0oCn8W rQTDgypeExbHGNnBu4tzfIvSryZAIiPWXUIU/NM/LzZr9JG5ftIcX/9dFjYhhWBl eU8cmyR2iq5MDCITxoJfxSMKLx8GmDXpL1AtphHcciWVVe4Rulaw5oqFQKEWpGzC 3F8dUGsfcEUoX1dAF448doD2xaUIlCD/cBp9lVyZua1NFShBkUDfU7ax/StGZ38L 3lT3rYt0pkQlfAWcDv/jU00vot0yZScixi4OobsTEbL20UgJK0RSL3dglitIU5XG fwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 418214509792196348841594266903027208234176 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-27 02:20:27 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-26 02:20:26 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'luxpropertymedia.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25926713004432177195637014483001008674836240868402919154803227674045043613012678002238415568679714966970190803578967525720264282671352271707418936988242900717195161243193212028109939502534762831159864347664695121043171744162947166084536860101914279654906460104188465285990954325932843247897205083921492664903486896571826961283622583479753053596645923745821800964532149692168213191371292688427593856238420605333090001379835447935457090007878549309465833941972968690588128860240490321422986418360555174854126458555344531108976031676167318947833314716907561190658378924544332397349078555356659641642594221952490735519359 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 2dabe36cd892f25bddd515973abd623a1a1feb6e . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (269 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amsterdamhomes.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'china4vip.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fantasticsidegig.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freedomprojectschool.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glucosescore.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobsluk.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jonrawles.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luxpropertymedia.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'selectioncodemovie.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'summercampsa.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'txcoastalbend.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'venturekids.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'votemeyers.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canwebuild.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018f1d918628000004030047304502210088b52a9903e0ee5acba4a3d881e7fb53677eac92d396ffa32e2f16fbcf9d6acd022035931057138e8eb03a7a6a4514a38fe25593fc7797afbdec87070ac66ba92c0d0076003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018f1d918673000004030047304502202120239b5092b34d1298ec59a791fcefd5e519a9c5f8d52f8827fef057da7ad0022100b64987bb61a43441b2bc10614e811043c0b019a772b5c8319d26dd143058dd61 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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