life-preservers.com

Issued by R3

About this certificate

This digital certificate with serial number 04:22:98:e9:e7:fd:ca:37:cf:31:f0:80:14:83:69:56:c2:2c was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=life-preservers.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:22:98:e9:e7:fd:ca:37:cf:31:f0:80:14:83:69:56:c2:2c
Serial Number (int): 360222001368224167172768979080635858993708
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: ed:f2:fa:61:34:c6:e6:36:e3:dc:8f:a3:58:c8:7c:1f:83:d5:eb:eb
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 3b:49:06:2f:0c:30:4e:ed:99:39:fb:58:eb:ab:e3:ee:94:1c:da:46
Fingerprint (sha256): f1:b9:c6:d2:6c:ad:4a:b1:1b:48:af:7d:92:c6:fb:d7:9f:da:32:f8:d0:12:de:d2:1e:96:79:d4:75:6a:2a:f6

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate life-preservers.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for life-preservers.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

life-preservers.com

Other certificates including the domain name life-preservers.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for life-preservers.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 360222001368224167172768979080635858993708
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-20 03:28:49 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-18 03:28:48 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'life-preservers.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 940904380038668118519905727774622604598582824320070111752888326005494333744321194643778702611147040556370722463566775374425036401254601290729445285131127767070390792026979856435410400058063031633104719007327522945829975965731730968533625714380470208942539043563577069315406405807371937825034249844518201295659148928925900301157185022162989302328854088640550578171742008076910293630426303310536786489005945480450512388438814196140641586836504386386071599748699048290688780648740018675979477359481876046362226395763053383390091370601929860420065137339839033714000240468714628339161085234392503822440833314335515546232889381907741777582223961299055879208413674936697177047440530703463956091033866835428764388871306733561471949898761139612286562168442951788596807408903389094810615838123298212470771621972677528942450622380654536944942213413005465049458680038290692906665247917965014612592786402351966301013000442742403847212495006306613240255454024117770089033673870881373415412432326916702756895847473946308481985222815484770938750030406149495481116897536264376383309670245428290853822871749500336398450398377260693418417330128566357496098035588204955326779353680779969598481236966440914570981348727369661327955212627592207161156736253
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							edf2fa6134c6e636e3dc8fa358c87c1f83d5ebeb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'life-preservers.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018beafcfb7f00000403004730450221009819309fd4a88b7c42bcb0c5144f7713c23cb40a3332b84a6c28c281609242d7022066eb44f02a960339ffcc720e60d8928f18d92c01b56ef9c8c9f4801ada6da1f400760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018beafcfbbd0000040300473045022100f108a8e01b28f6c18f20a8f44e4e57957cea28f25e0e97563618c50275680ef302205162d4c80d95c438d366e1c696b9e3eef60369a342319c8d8cce1db2574944ab
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		003a972305b56042b7c52c054c837c5ed0cbc0b98bad22a07f23384335a1b9b7feef84af938c5dc4151e32bdf16e874386138d43bd567b752ca8dc2ab4bbf5050f63dc236ec8c5204399983581cb57430ffc9347e316e09c2f3a0dd0af41ee9b1f1ba6d3b7cfb4c775ef83fbfd56f01891fd6b37eb15181f354e608fe72f20471ec96d11a8c2bfb035614c0330eeb1d02ea0c37e0d5b7ac8829b427af7074cda6309f8f1a6e42d84526ae50a370221638750f093031a28b01985447efc714dd2c3fa0e3eebfc40a4c6624a29679ee86db6b9ad66cb964503aea6bf2e4b5f21d45f351d71b9642775851977791c0d87842255df1c5e1327756da1d73f089918a040