www.mygeneticsexplained.com

Issued by R3

About this certificate

This digital certificate with serial number 03:a6:21:79:25:48:86:0e:f3:d3:68:6d:b4:b6:c9:5a:4c:f8 was issued on by Let's Encrypt.

With 30 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.mygeneticsexplained.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a6:21:79:25:48:86:0e:f3:d3:68:6d:b4:b6:c9:5a:4c:f8
Serial Number (int): 317868224252132381916591977207243688529144
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2e:32:27:f3:d7:3c:b2:2b:70:14:c4:a3:98:ed:d0:19:0d:ee:1d:29
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): f6:14:8e:ad:01:d1:47:da:70:a8:36:83:9b:ab:98:13:9a:a2:07:8e
Fingerprint (sha256): f7:5b:52:8e:07:d9:8d:41:58:19:32:c0:aa:57:10:fb:5e:75:04:a5:4c:71:22:4a:0b:7e:b6:b3:09:1a:30:f5

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.mygeneticsexplained.com

30

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.mygeneticsexplained.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

498.me
7niswap.org
domebnb.life
fundingstability.ca
globalmacro.ch
mygeneticsexplained.com
newyorkstemcellclinic.com
ohprint.org
pifta.com
preallocated.ca
sciconvention.org
shantiniketanseniorliving.org
vermontsportsmed.com
viperswaap.one
www.498.me
www.7niswap.org
www.domebnb.life
www.fundingstability.ca
www.globalmacro.ch
www.mygeneticsexplained.com
www.newyorkstemcellclinic.com
www.ohprint.org
www.pifta.com
www.preallocated.ca
www.sciconvention.org
www.shantiniketanseniorliving.org
www.vermontsportsmed.com
www.viperswaap.one
www.xn--ptnopdilos-f7a41c.com
xn--ptnopdilos-f7a41c.com

Other certificates including the domain name mygeneticsexplained.com

(limited to 100 certificates)
caribbean.fishing
furiousbear.com
nannypayrolltaxes.com
aste.co
www.pineisland.expert
theneweko.org
www.itsawrapbands.com
preteen-model.com
www.bambooslots.com
de-mail.xyz
www.lailatalqadr.com
www.rezmaster.com
www.polylase.com
roulette-spielen.com.de
www.poisonivymedica.com
londoncriminalsolicitor.com
josephwebb.com
www.shellpad.ch
www.londoncriminalsolicitor.com
beelinehomebuilders.com
africaringbacktone.com
www.virtualliveblackjack.com
www.mygeneticsexplained.com
3d4dp.com

Certificate

The complete raw certificate details for www.mygeneticsexplained.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuoPTdQrxSQ9fI1C1UAQD
11SpzSXYiRvpB6WqIj2nJ71O+BY7GS7ti4m99l/DQ15EX7WROtpPdsLTfxihfrQC
MAJ/FJTBbI7l8l7L46yneyl7yTTgqiM58J+5+NxgfpaQYBRH5flX1yiE6IzatczP
Vm7GizQvgaODw/9JTGjZoTKxx3kpgLgZmeN3jJbmvaCsMkfi4dj/N8uMelHFIGd7
kEIdaFXHqSb1JQ4x7Yd3P3iuvMFcqjoscmwCV1ZFqdNo8EvteXD7k8s9m7jASdG3
Q3yZta2PEes2c8V+sEqZxu6LYOgzElyN7M5uwJUKGEu3181iXh3/qq+3U7I/JNfR
fQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 317868224252132381916591977207243688529144
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-22 17:04:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-23 17:04:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.mygeneticsexplained.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23545330549395184057084380444970673367933852642231202386057671564810362544454785704526995392577301121117292271491877923073844480680112847435480213151713863406636140225677363590305517906446062700153613081883325551521463767722753327959996515875967151849029006742933342456120818447383689579185468673904353251430649797579661928206413429655577958943077416043406102521835487708217657380385317522312352044984165610936924334641402507190290542510810640217563711119698118290461147366780552385684365100669419282407838475254621384133140483446456590824958646468578078946469083772323644905637845994903760613397335762582841540989309
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2e3227f3d73cb22b7014c4a398edd0190dee1d29
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (624 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '498.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '7niswap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'domebnb.life'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundingstability.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globalmacro.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mygeneticsexplained.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newyorkstemcellclinic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ohprint.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pifta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preallocated.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sciconvention.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shantiniketanseniorliving.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vermontsportsmed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viperswaap.one'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.498.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.7niswap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.domebnb.life'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fundingstability.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.globalmacro.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mygeneticsexplained.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newyorkstemcellclinic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ohprint.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pifta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.preallocated.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sciconvention.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shantiniketanseniorliving.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vermontsportsmed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.viperswaap.one'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--ptnopdilos-f7a41c.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--ptnopdilos-f7a41c.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb52000001867a4c11fe0000040300473045022100db615344ac14014062ecb79d1c1fb89b2d4a90ebd673fc5b35bc5f15543d1839022038dbe117aff50eaf0ebc1ec8cecfca92edac549e5ab93039ab4073fd758b9ed2007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e000001867a4c11df00000403004730450220646678af932515ab4327a873931521413c5612b6a3b9e84656b8db8d34fe9b44022100e734a19dc16926a335682ebe668badc71803bf0018556825558c26566a5f984c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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