mortgagelendingconnecticut.com.covidvaccine.org
Issued by R3
About this certificate
This digital certificate with serial number 03:1b:e2:3e:f2:74:68:b0:e7:af:f5:8e:03:64:70:82:27:1f was issued on by Let's Encrypt.
With 11 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=mortgagelendingconnecticut.com.covidvaccine.org
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:1b:e2:3e:f2:74:68:b0:e7:af:f5:8e:03:64:70:82:27:1fSerial Number (int): 270825214069164689841409151852122652944159
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: dd:92:17:f6:fc:93:c9:c0:14:16:21:e1:f7:ba:93:f5:60:dd:c5:ad
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 87:b8:38:49:1a:a8:96:f2:f0:fa:4e:05:8a:af:03:75:ee:3b:15:ea
Fingerprint (sha256): fa:25:3b:5b:e8:81:ee:d2:12:00:7f:02:e3:4c:16:60:93:e7:2e:36:ca:4e:13:73:b2:f7:2b:17:f1:9e:83:b8
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate mortgagelendingconnecticut.com.covidvaccine.org
11
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for mortgagelendingconnecticut.com.covidvaccine.org
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
adfscaliacenter.com
bugfreekit.com
freedombacon.com
funnels.info
johnpyle.com
mortgagelendingconnecticut.com.covidvaccine.org
nayantara.co.in.ideasdomain.com
seadoodealer.com
unndan.com.michianasalvageman.com
www.canwebuild.com.au
zziioo.com.8228.cool
bugfreekit.com
freedombacon.com
funnels.info
johnpyle.com
mortgagelendingconnecticut.com.covidvaccine.org
nayantara.co.in.ideasdomain.com
seadoodealer.com
unndan.com.michianasalvageman.com
www.canwebuild.com.au
zziioo.com.8228.cool
Other certificates including the domain name covidvaccine.org
(limited to 100 certificates)
covidvaccine.org
callin.hacker.rehab
avephilomena.org
www.sawadeeka.com
arbitrage.blog
www.covidcure.org
covidvaccine.org
impossible.ca
covidvaccine.org
4-4.org
nigeriarealestate.mobi
www.covidtreatment.org
shop.gutrad.de
sculpit.life
covidvaccine.org
www.covidtreatment.org
norwoodfoundry.ca
covidvaccine.org
mortgagelendingconnecticut.com.covidvaccine.org
ssl-1p30q.epik.to
callin.hacker.rehab
avephilomena.org
www.sawadeeka.com
arbitrage.blog
www.covidcure.org
covidvaccine.org
impossible.ca
covidvaccine.org
4-4.org
nigeriarealestate.mobi
www.covidtreatment.org
shop.gutrad.de
sculpit.life
covidvaccine.org
www.covidtreatment.org
norwoodfoundry.ca
covidvaccine.org
mortgagelendingconnecticut.com.covidvaccine.org
ssl-1p30q.epik.to
Certificate
The complete raw certificate details for mortgagelendingconnecticut.com.covidvaccine.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGBjCCBO6gAwIBAgISAxviPvJ0aLDnr/WOA2RwgicfMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzEyMjMwNjA3NTVaFw0yNDAzMjIwNjA3NTRaMDoxODA2BgNVBAMT L21vcnRnYWdlbGVuZGluZ2Nvbm5lY3RpY3V0LmNvbS5jb3ZpZHZhY2NpbmUub3Jn MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1bH14e1WhfAjFHIMsTWf sYHx3SUoA4+FceL/rk/4ayzzsiG2u3E8rZxeNJzDDxACvc4uoDErqflXQxOuFqKe SvgdkdQNUaDhZBFbwGAiSKl/wbVMbtV7xVWO548tkJ0wy/g9esBmxAElvR1zzxx3 4q2xcgmyOYtZ3RXjScaHWdZyXffLP975EG8l6Dxsc/CkH+f0Tz8pkqPW8g4vprv2 BhF2LEFPW+IkC1CFIfNKgFLGDgAO5YBLqs4X22QEjX5vepvsoAOd96y2xa22IkQu 7kmZo6Ic/DngfQNtLSInr3YvV8gvJLwfpJ943Nadr6yNMctMD5Lukp+EkSJDH4la PwIDAQABo4IDDDCCAwgwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUF BwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBTdkhf2/JPJwBQW IeH3upP1YN3FrTAfBgNVHSMEGDAWgBQULrMXt1hWy65QCUDmH6+dixTCxjBVBggr BgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGGFWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAi BggrBgEFBQcwAoYWaHR0cDovL3IzLmkubGVuY3Iub3JnLzCCARQGA1UdEQSCAQsw ggEHghNhZGZzY2FsaWFjZW50ZXIuY29tgg5idWdmcmVla2l0LmNvbYIQZnJlZWRv bWJhY29uLmNvbYIMZnVubmVscy5pbmZvggxqb2hucHlsZS5jb22CL21vcnRnYWdl bGVuZGluZ2Nvbm5lY3RpY3V0LmNvbS5jb3ZpZHZhY2NpbmUub3Jngh9uYXlhbnRh cmEuY28uaW4uaWRlYXNkb21haW4uY29tghBzZWFkb29kZWFsZXIuY29tgiF1bm5k YW4uY29tLm1pY2hpYW5hc2FsdmFnZW1hbi5jb22CFXd3dy5jYW53ZWJ1aWxkLmNv bS5hdYIUenppaW9vLmNvbS44MjI4LmNvb2wwEwYDVR0gBAwwCjAIBgZngQwBAgEw ggEDBgorBgEEAdZ5AgQCBIH0BIHxAO8AdQB2/4g/Crb7lVHCYcz1h7o0tKTNuync aEIKn+ZnTFo6dAAAAYyVgH4EAAAEAwBGMEQCIBCN/1W7YR9XMSqNKDQkOGyc+sLJ lWU3TkhZDMtM7tI8AiBYoFzr3N8zDAoNYhZIEwy9ZIRIrCR8iQ41puiL1yvGdQB2 AEiw42vapkc0D+VqAvqdMOscUgHLVt0sgdm7v6s52IRzAAABjJWAf6YAAAQDAEcw RQIgcNpbI4sYPko7gipUz2Wsgrlc1wr38Sd3LeQWyMZkdagCIQDer2xgufFHCRCJ ksh9vs0/g3nhTCGYLx0wfNj1ubQj9DANBgkqhkiG9w0BAQsFAAOCAQEAPlzbRU/y 5u7KfLNergEcD8hc/i4MGUWaYPtOqHSOdzgAlUpJyh5rh0LWIagaD9+oVve/oCrR PHQRg5XSO0HDjqyetnPUqYb7SJXVxttNbS1No07Sq/3H7gjNlvqU4OhXtAD6wiDr pJW8j2pj3IX8R34TT8+RL0IaoU9qza9R/+umia8yHUUzhGavlvr68aX+sD1yvQSh 2yWmYXGcxOgtXmYKasMXw8HN1sdAKUivk/l+4K3jzq5z32xayn4WMUQw904BGVf6 33mQI7esr38whU2+9zHv5Yc839JwicU72dBKRURqnX+57heFkGdtVG9T6DWZRU9x UmLHZ93EgGT0jA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1bH14e1WhfAjFHIMsTWf sYHx3SUoA4+FceL/rk/4ayzzsiG2u3E8rZxeNJzDDxACvc4uoDErqflXQxOuFqKe SvgdkdQNUaDhZBFbwGAiSKl/wbVMbtV7xVWO548tkJ0wy/g9esBmxAElvR1zzxx3 4q2xcgmyOYtZ3RXjScaHWdZyXffLP975EG8l6Dxsc/CkH+f0Tz8pkqPW8g4vprv2 BhF2LEFPW+IkC1CFIfNKgFLGDgAO5YBLqs4X22QEjX5vepvsoAOd96y2xa22IkQu 7kmZo6Ic/DngfQNtLSInr3YvV8gvJLwfpJ943Nadr6yNMctMD5Lukp+EkSJDH4la PwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 270825214069164689841409151852122652944159 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-23 06:07:55 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-22 06:07:54 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mortgagelendingconnecticut.com.covidvaccine.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26976514540475331819614480921642044608158729745642830634376451429662161587888107283270624639087803359300896502268709881543642832605526590335929637135566649547019878787755198097274929645475657888065753121493033336918078024032369842216860560278300183247630431516652869901313240430886081381905054424269459148380808277479547905493259511934832799229155080627787503359677714612382711827162913623208361532948257008239806042754494679791440119573480733890350002654925212445514020539296850992224925938625093161858885299570964440660025041228540124760706649162364360380480717415397019899058424719919873516853464036940461862640191 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) dd9217f6fc93c9c0141621e1f7ba93f560ddc5ad . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (267 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adfscaliacenter.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bugfreekit.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freedombacon.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'funnels.info' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'johnpyle.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mortgagelendingconnecticut.com.covidvaccine.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nayantara.co.in.ideasdomain.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seadoodealer.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unndan.com.michianasalvageman.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canwebuild.com.au' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zziioo.com.8228.cool' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef00750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018c95807e0400000403004630440220108dff55bb611f57312a8d283424386c9cfac2c99565374e48590ccb4ceed23c022058a05cebdcdf330c0a0d621648130cbd648448ac247c890e35a6e88bd72bc67500760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c95807fa60000040300473045022070da5b238b183e4a3b822a54cf65ac82b95cd70af7f127772de416c8c66475a8022100deaf6c60b9f14709108992c87dbecd3f8379e14c21982f1d307cd8f5b9b423f4 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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