shoppingcart.roughnotes.com

Issued by R3

About this certificate

This digital certificate with serial number 04:ac:94:a7:2a:bc:23:2e:c4:35:f6:a7:34:e3:2f:75:ce:ca was issued on by Let's Encrypt.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=shoppingcart.roughnotes.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:ac:94:a7:2a:bc:23:2e:c4:35:f6:a7:34:e3:2f:75:ce:ca
Serial Number (int): 407175304561160931586162342460883339693770
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: b0:49:a1:17:33:e2:d3:78:be:68:bd:1c:f0:87:35:5d:20:d8:ab:9a
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 7f:53:f6:13:28:9a:db:67:55:da:ab:bd:33:16:bf:be:b7:7c:28:f5
Fingerprint (sha256): fa:39:13:7e:af:b4:bf:d0:7f:5a:ff:b6:18:38:85:0d:24:61:82:07:ee:af:0f:b5:73:63:82:9e:1f:01:23:c9

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate shoppingcart.roughnotes.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for shoppingcart.roughnotes.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

shoppingcart.roughnotes.com

Other certificates including the domain name roughnotes.com

(limited to 100 certificates)
roughnotes.com
shoppingcart.roughnotes.com
roughnotes.com
roughnotes.com
roughnotes.com
dev.roughnotes.com
roughnotes.com
roughnotes.com
shoppingcart.roughnotes.com
shoppingcart.roughnotes.com
roughnotes.com
roughnotes.com
roughnotes.com
shoppingcart.roughnotes.com
shoppingcart.roughnotes.com
shoppingcart.roughnotes.com
roughnotes.com
roughnotes.com
shoppingcart.roughnotes.com
shoppingcart.roughnotes.com
roughnotes.com
shoppingcart.roughnotes.com
shoppingcart.roughnotes.com
roughnotes.com
shoppingcart.roughnotes.com
roughnotes.com
shoppingcart.roughnotes.com
shoppingcart.roughnotes.com
roughnotes.com
roughnotes.com
roughnotes.com
roughnotes.com
shoppingcart.roughnotes.com

Certificate

The complete raw certificate details for shoppingcart.roughnotes.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAltJTcjWUlg9D1Fx+qEoi
ngKq4ADn3rUp9wDgHzgkTQOAbzzO0xcrTQFnbJzts7xrzlfzq0Q2HQL36ond20m9
7eD/L3Gbpjgkv2DvxYfCG00lKk1cUiV1IuTXJ7OqmYRVc6M68Z5ODlBF/vy1M5Z+
l9YW+/i+n8EEO7+O+awdDZevgLHaeZkVI8Q0Tuu2lJqkvfT4ruQPURdIvDtbKcvv
aVgLWhTLTjHzEnUr9abGUMucWNii6c1VmBFTFQ4a/98UvJkPAFv3d06+GXGDCb2w
5egIt51SXoMpBbrtljiqccZ+juUrYZyJowozbuyJp+Y8/HFkOBRiXdlFxeE345wI
yQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 407175304561160931586162342460883339693770
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-04 02:48:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-02 02:48:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'shoppingcart.roughnotes.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19039461342030857688815849438352227807804603995580415624365103426160262537396825762364009231863610084434682931576086424140997052018267708946159591223924032148315042822664073177691022212453118772386951821501953383602865857735172395280550927317260137650325783715109106528458321725341141191907292711443915411381571672701714960938706919587783733619676598685463539524671777204113254322078415984543658220032719020264774221952848511712533007426636613958484299513462424681443956378285631651188156422358843861864391650629223007757911473967757037237281321724186977894938496904809863371780094637134546999633976551583686030264521
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b049a11733e2d378be68bd1cf087355d20d8ab9a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shoppingcart.roughnotes.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f200770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018e07938cb90000040300483046022100e82e82aa62168b70604c0178a8544b986d52cc94f61295f8ac5cbf2678e1fdd3022100f4f6c248f5bbfcc5d27be16ec8dfdbe30bdc5e7cd596173dcbaa18f6d6a05dae0077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018e07938cb50000040300483046022100e8d49a437443068006adf692d1be22fed41041d620f08cbe83630dc4f9295034022100dc448ba217b4304e0e5b88b6bc0a89acc9a01edeb2513d767fcb3e437d70025c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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