hankomaster.freede.net
Issued by R3
About this certificate
This digital certificate with serial number 03:2d:c8:c8:2d:1e:69:dd:f8:1d:a8:ca:95:ed:f6:e3:cc:93 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=hankomaster.freede.net
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:2d:c8:c8:2d:1e:69:dd:f8:1d:a8:ca:95:ed:f6:e3:cc:93Serial Number (int): 276916449280369702245914504652448346655891
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 5e:96:59:83:7c:fb:c1:3d:41:11:65:16:8d:85:89:f5:fe:90:ed:f3
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): e7:4f:91:41:ad:27:81:56:d8:66:6f:8a:29:26:d4:3e:f0:2b:5e:e7
Fingerprint (sha256): ec:0d:9a:e9:7f:52:bb:3d:5f:da:b7:11:fa:64:45:35:d4:d1:a5:59:72:14:88:51:a7:46:c3:e6:85:07:2c:44
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate hankomaster.freede.net
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for hankomaster.freede.net
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
hankomaster.freede.net
Other certificates including the domain name freede.net
(limited to 100 certificates)
es05xzml.freede.net
yk8kc5ka.freede.net
std-prd.freede.net
bos.freede.net
sns3.freede.net
sog.freede.net
bcg.freede.net
bos.freede.net
pms.freede.net
*.freede.net
ptr.freede.net
yk8kc5ka.freede.net
acr.freede.net
pms.freede.net
pms.freede.net
ptr.freede.net
ptr.freede.net
gpt.freede.net
*.freede.net
ncs.freede.net
sog.freede.net
bos.freede.net
bos.freede.net
uranai.freede.net
es05xzml.freede.net
markviicarwashing.com
yk8kc5ka.freede.net
sog.freede.net
todo.freede.net
yk8kc5ka.freede.net
pms.freede.net
ptr.freede.net
todo.freede.net
b2b.gosbi.com
yk8kc5ka.freede.net
medicaid.ga
www.zamacleaning.co.za
pms.freede.net
line.freede.net
www.theinnovatio.com
bos.freede.net
ptr.freede.net
demodrone.falcomatics.com
www.fpdesignpermits.com
sog.freede.net
app.indotorastore.com
yk8kc5ka.freede.net
app.aconume.com
sog.freede.net
*.freede.net
ptr.freede.net
pms.freede.net
medicaid.ga
sog.freede.net
ptr.freede.net
bos.freede.net
bos.freede.net
sog.freede.net
yk8kc5ka.freede.net
yk8kc5ka.freede.net
hankomaster.freede.net
pms.freede.net
h4imb3fs.freede.net
srcwp.freede.net
yk8kc5ka.freede.net
std-prd.freede.net
bos.freede.net
sns3.freede.net
sog.freede.net
bcg.freede.net
bos.freede.net
pms.freede.net
*.freede.net
ptr.freede.net
yk8kc5ka.freede.net
acr.freede.net
pms.freede.net
pms.freede.net
ptr.freede.net
ptr.freede.net
gpt.freede.net
*.freede.net
ncs.freede.net
sog.freede.net
bos.freede.net
bos.freede.net
uranai.freede.net
es05xzml.freede.net
markviicarwashing.com
yk8kc5ka.freede.net
sog.freede.net
todo.freede.net
yk8kc5ka.freede.net
pms.freede.net
ptr.freede.net
todo.freede.net
b2b.gosbi.com
yk8kc5ka.freede.net
medicaid.ga
www.zamacleaning.co.za
pms.freede.net
line.freede.net
www.theinnovatio.com
bos.freede.net
ptr.freede.net
demodrone.falcomatics.com
www.fpdesignpermits.com
sog.freede.net
app.indotorastore.com
yk8kc5ka.freede.net
app.aconume.com
sog.freede.net
*.freede.net
ptr.freede.net
pms.freede.net
medicaid.ga
sog.freede.net
ptr.freede.net
bos.freede.net
bos.freede.net
sog.freede.net
yk8kc5ka.freede.net
yk8kc5ka.freede.net
hankomaster.freede.net
pms.freede.net
h4imb3fs.freede.net
srcwp.freede.net
Certificate
The complete raw certificate details for hankomaster.freede.net in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEBjCCAu6gAwIBAgISAy3IyC0ead34HajKle3248yTMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzEyMDIxOTA1NDNaFw0yNDAzMDExOTA1NDJaMCExHzAdBgNVBAMT FmhhbmtvbWFzdGVyLmZyZWVkZS5uZXQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw ggEKAoIBAQC9pWeZ4pFCAAC63ODep3E1OyFbUPotmUqh0wWY9S+UAv93DOltxiwG zlqfOyFwXWV558vbyhUyZvu/L4M8in++fCeWeVU+GHdzMqw69kRhSpSisPTLJ4ET Fzu0f90gdn9ZzCmKB8nVbh0Xwd5kGqP/9Xf31aJE7vS2rDOzl83Yms5IxFNrM9ch uihdriObUaM0twlxqf35Dd/pDLBcdf97SepmfO0c61TpwKj13QCgXyShYkRQMXRj fSbwb6TpA4TvJGUNj2VyYIx98P/6xzbXtUvjl2wwafSH2YSXPPDC2mSP4MPPSfzP caihyYsWdG/1PMc1MwIgr5MVsI8WhmcLAgMBAAGjggElMIIBITAOBgNVHQ8BAf8E BAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQC MAAwHQYDVR0OBBYEFF6WWYN8+8E9QRFlFo2FifX+kO3zMB8GA1UdIwQYMBaAFBQu sxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYV aHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5s ZW5jci5vcmcvMCEGA1UdEQQaMBiCFmhhbmtvbWFzdGVyLmZyZWVkZS5uZXQwEwYD VR0gBAwwCjAIBgZngQwBAgEwEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcN AQELBQADggEBABHT8VbQkefatVZ+lNSaf5Bjnk7LuV8OJa5V78Ykgx7J8IoHNLKh /EaSAb8k/vU5B2xc5Wym+Trq2QgwvAAQNXu64pXbWRsp6y9d1YsfVl6xDHY8x7hE sRJ4vYNIwPoLltT7V3RZLzOOfd2Sddcrr7raOQyDKIC/ZK187XLkmGajIRCbukZ2 gwQFJ+DRIra7wTEQK9l6uYz2h/8JFKLjt2FWclGpOl46/TTd5VjyJq/eKtEP9X0J /6zai3dpwlvBA91qvYZveWaKnVVzpuG2DpOV00+DkAkcdNQ9XZk19smiXc6U0RKN r67S/g6M3krl4FepmRBpsNTCTeNF4REl/mA= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvaVnmeKRQgAAutzg3qdx NTshW1D6LZlKodMFmPUvlAL/dwzpbcYsBs5anzshcF1leefL28oVMmb7vy+DPIp/ vnwnlnlVPhh3czKsOvZEYUqUorD0yyeBExc7tH/dIHZ/WcwpigfJ1W4dF8HeZBqj //V399WiRO70tqwzs5fN2JrOSMRTazPXIbooXa4jm1GjNLcJcan9+Q3f6QywXHX/ e0nqZnztHOtU6cCo9d0AoF8koWJEUDF0Y30m8G+k6QOE7yRlDY9lcmCMffD/+sc2 17VL45dsMGn0h9mElzzwwtpkj+DDz0n8z3GoocmLFnRv9TzHNTMCIK+TFbCPFoZn CwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 276916449280369702245914504652448346655891 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-02 19:05:43 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-01 19:05:42 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'hankomaster.freede.net' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23940603732071313399453901211938213634947905479918908050446952707442444109945183379100954121364967791127041554022164398138689203290263418835270264979371193260706863213084862907209535712629527658427250808207571266072042553909446701725254095702947043844205084515651622422645846819502690663045581960624846273047211908283657219161574705816384125048459719260697759492390924370939415970875316741331626140734488769856942848174287997971137920833290895378258025587938434165263600410562066523710802073748756080776310555568193289013029369818104207747995812864344354153050607525053150483642886808119085051750276984858715091265291 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 5e9659837cfbc13d411165168d8589f5fe90edf3 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hankomaster.freede.net' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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