www.etcgroup.org

Issued by R3

About this certificate

This digital certificate with serial number 04:1d:0f:88:09:66:02:9f:59:77:01:bb:04:85:0f:01:08:6d was issued on by Let's Encrypt.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.etcgroup.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:1d:0f:88:09:66:02:9f:59:77:01:bb:04:85:0f:01:08:6d
Serial Number (int): 358337977130681507122615360763853950486637
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: b7:e6:80:a8:04:b9:3f:e7:28:f3:39:2c:cb:39:20:a3:ae:bd:51:56
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 50:97:d6:7b:65:9e:7b:f2:ea:b6:77:7b:96:92:b7:28:b8:46:f6:a0
Fingerprint (sha256): 00:67:39:db:2b:7a:fd:c5:9d:2d:33:98:f3:95:85:cc:02:d9:79:4d:17:a5:e0:b4:48:79:11:ea:c7:27:68:01

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.etcgroup.org

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.etcgroup.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

etcgroup.org
www-etcgroup-org.aegir3.koumbit.net
www.etcgroup.org

Other certificates including the domain name etcgroup.org

(limited to 100 certificates)
www.etcgroup.org
secure5a903bff44db482cba0000c3.nationbuilder.com
secure5a903bff44db482cba0000c3.nationbuilder.com
secure5a903bff44db482cba0000c3.nationbuilder.com
www.etcgroup.org
secure5a903bff44db482cba0000c3.nationbuilder.com
www.etcgroup.org
www.etcgroup.org
www.etcgroup.org
www.etcgroup.org
www.etcgroup.org
www.etcgroup.org
www.etcgroup.org
secure5a903bff44db482cba0000c3.nationbuilder.com
secure5a903bff44db482cba0000c3.nationbuilder.com
www.etcgroup.org
www.etcgroup.org
secure5a903bff44db482cba0000c3.nationbuilder.com
www.etcgroup.org
www.etcgroup.org
secure5a903bff44db482cba0000c3.nationbuilder.com
secure5a903bff44db482cba0000c3.nationbuilder.com
www.etcgroup.org
secure5a903bff44db482cba0000c3.nationbuilder.com
chat.etcgroup.org
secure5a903bff44db482cba0000c3.nationbuilder.com
www.etcgroup.org

Certificate

The complete raw certificate details for www.etcgroup.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGIDCCBQigAwIBAgISBB0PiAlmAp9ZdwG7BIUPAQhtMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzA3MTgxMjI2NDRaFw0yMzEwMTYxMjI2NDNaMBsxGTAXBgNVBAMT
EHd3dy5ldGNncm91cC5vcmcwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoIC
AQDIOIFRK/Cd9chdlCu+eHum5QWpsvpM9YLLCjGsrsQCm/KAFd1DpHxnOwEqwDFh
2mA2M5EAg5bjnXNC1DYwJneOXjMS+YGgcuOXNqPsS0MgQaQJYdTeP5FmRupmxSfI
0CeKzBIaLTFeocqilLDTCRbEZpvCVQidRSN6yg3BcJqc/URHQTETXi6ioIM6JflV
funZSgSk8Qyzhlfds1dWh0METY07Pm16bxsawUNIRBfLxB8vumsT0DBz+/YbkwaE
Z1UOda+gJ0VMAC/Hyo6AqlpkM/a9JStTjEJE2jJZnH6JJYss3fAdFO9LrwQIAoLz
Y3/IchQ1hNfYxVYg/FdaOszNkAZfs8qGHSoHxa/vrdJni7r72+MoT68Y6h8AHeqk
LV0qK7vNmvmvWmD8IynNwZqjrzaS3vlBWlAJ5ftvP0rY/9DFiu8RuMj7Gxz/88iW
PhosaMFgsPrq+nEhY5FQpPw3+ENmI6ubcyls5Md5zzapK2A7P1Kb2cV+X4fXhvtA
/cj95KElmy9RN/AO76CljLeg8yNRTzxFn1Vy9i5yRBgNZoPIjE1ICvf5e5s/pezt
x1//jeNTnykwllCMFG2s5ai1oxLEIjcZmqUIPWe+NcfCOQQND0uEVsYiYDXT6qAr
ohfpwdbCefwfitMgAvYGb5JL/gw4wfwTsWXA0apCkNmsRQIDAQABo4ICRTCCAkEw
DgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAM
BgNVHRMBAf8EAjAAMB0GA1UdDgQWBBS35oCoBLk/5yjzOSzLOSCjrr1RVjAfBgNV
HSMEGDAWgBQULrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYI
KwYBBQUHMAGGFWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0
cDovL3IzLmkubGVuY3Iub3JnLzBOBgNVHREERzBFggxldGNncm91cC5vcmeCI3d3
dy1ldGNncm91cC1vcmcuYWVnaXIzLmtvdW1iaXQubmV0ghB3d3cuZXRjZ3JvdXAu
b3JnMBMGA1UdIAQMMAowCAYGZ4EMAQIBMIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDw
AHcAtz77JN+cTbp18jnFulj0bF38Qs96nzXEnh0JgSXttJkAAAGJaS6HIwAABAMA
SDBGAiEA4idJVDaq1w1wtsDk2I4MTUN84P504dm6I70tsVWpX9kCIQCtsgdE29D0
BgGiVvrskio8LyH87m6S1N8rGlnHK5lZNQB1AK33vvp8/xDIi509nB4+GGq0Zyld
z7EMJMqFhjTr3IKKAAABiWkuh14AAAQDAEYwRAIgJRwvLyPadEzE5CX1pqYK9g8Q
211g5v2tIHYRQBvG6LQCIGsIDIAo9b668YxcHOiKXd6QjDQM8R0mlisRoD6N3n9b
MA0GCSqGSIb3DQEBCwUAA4IBAQA9i42e0YeKu3EFE2lKHecxCtFmPy0CyZRADKmg
jDG/+FhHRWpvvPgEEqnwMzOOuqrIgsWFQKwBBle65iZflhsyxYgOlf+K2dxQus9c
aKD6r2AEh0SQWKHSybG34q17x65o6X0gSL7yuH0nUZwbr3aNdCNzHtZRqNM0pHcr
4++zjK+Tskk0Qf16v4BaSKzGkEYB2y7Z7OH6AeroSHZ2viBWaMiDj4yM7tY3SyZq
A5aR7ksdsrcWDVgkpHV1gv9OW4KM62V1mS+/MwU+oj7fFUbfS59bIo9I/KAnC2Gm
VtkY3Qg1AtfT4g6G5Lcp/W4QS7ekoCuLUGZ8FGXt3MIDo8JT
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 358337977130681507122615360763853950486637
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-18 12:26:44 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-16 12:26:43 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.etcgroup.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 816829285787315042267397408561342246104211656242997427681880929017442072709480646239228106295826005922916176828320638868746161012291479405631604289696750823919087652161033166991197785782085169358494837298743763438220225580457767219523221848039895824142549915589024008303509055916763047722715130303360845659512947116001527299389971598376099840170487820114058004780720795370802277775619714337416837853439845871716423321474804459123145041962764388055749831016748038546971147110887143243586901642289124215344286357409696091311223181396528459956292777518941634318314127063215881540924661595927348156667451615681603307536797559196948840971946758192999306251126368283911779063053734631963914249383881760851943065322350537240229306661013675408018647104184281302308648072916704970704300958312021811377016493364166158040191216395893125592505815042768533003406615936358466267816756137858799104507768132502221617142228661225213736534781288383178131404873924852529137601940739977957594368074853291485703699195817312589323144114911006611427058067406893982356725771191001906293782772781391366662904402971545786804680732603403161510691627714816371860665603773093246645133709896248650287425778368701711316411157587256241933038256060471456648945839173
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b7e680a804b93fe728f3392ccb3920a3aebd5156
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (71 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'etcgroup.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-etcgroup-org.aegir3.koumbit.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.etcgroup.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000189692e87230000040300483046022100e227495436aad70d70b6c0e4d88e0c4d437ce0fe74e1d9ba23bd2db155a95fd9022100adb20744dbd0f40601a256faec922a3c2f21fcee6e92d4df2b1a59c72b995935007500adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a00000189692e875e00000403004630440220251c2f2f23da744cc4e425f5a6a60af60f10db5d60e6fdad207611401bc6e8b402206b080c8028f5bebaf18c5c1ce88a5dde908c340cf11d26962b11a03e8dde7f5b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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