acluversusamerica.net.internationalhomeschoolday.org
Issued by R3
About this certificate
This digital certificate with serial number 04:43:ec:f0:33:e1:79:a5:28:4e:bc:c3:9e:bb:c5:a0:a9:63 was issued on by Let's Encrypt.
With 11 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=acluversusamerica.net.internationalhomeschoolday.org
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:43:ec:f0:33:e1:79:a5:28:4e:bc:c3:9e:bb:c5:a0:a9:63Serial Number (int): 371563007321262025844418236482755076598115
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 32:7d:b6:40:9f:71:9e:e8:63:d6:a4:82:5e:53:5b:33:e1:c1:e3:66
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 5a:8b:dc:58:23:b4:9e:85:ce:90:84:8f:a8:72:7d:3a:51:e2:88:46
Fingerprint (sha256): 00:d4:10:ce:50:40:1e:ec:df:67:01:e9:79:55:6a:88:71:a6:b8:b4:30:39:52:68:2a:da:19:72:5e:f6:4e:1d
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate acluversusamerica.net.internationalhomeschoolday.org
11
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for acluversusamerica.net.internationalhomeschoolday.org
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
acluversusamerica.net.internationalhomeschoolday.org
animalparades.com
az.cosfacts.org.eringeevoice.net
christmaslightshuntington.com
jeeztv.com
leathercowboyboots.com
lovanov.com
replicadesignerhandbags.com.transformationexteriors.com
riseuplegal.net.5cardinalcreek.com
rockland.realty
thatsoutrageous.com
animalparades.com
az.cosfacts.org.eringeevoice.net
christmaslightshuntington.com
jeeztv.com
leathercowboyboots.com
lovanov.com
replicadesignerhandbags.com.transformationexteriors.com
riseuplegal.net.5cardinalcreek.com
rockland.realty
thatsoutrageous.com
Other certificates including the domain name internationalhomeschoolday.org
(limited to 100 certificates)
acluversusamerica.net.internationalhomeschoolday.org
gopvideographer.org
internationalhomeschoolday.org
arbitrager.ca
mna.vc
internet.yoga
www.shapefashion.org
arbitragers.ca
fifi.ng
wiwak.vc
internationalhomeschoolday.org
enerpactoolgroup.asia
internationalhomeschoolday.org
prairiesage.org
churchsurplus.org
internationalhomeschoolday.org
modaltownhomes.ca
mineralindependence.ca
gopvideographer.org
internationalhomeschoolday.org
arbitrager.ca
mna.vc
internet.yoga
www.shapefashion.org
arbitragers.ca
fifi.ng
wiwak.vc
internationalhomeschoolday.org
enerpactoolgroup.asia
internationalhomeschoolday.org
prairiesage.org
churchsurplus.org
internationalhomeschoolday.org
modaltownhomes.ca
mineralindependence.ca
Certificate
The complete raw certificate details for acluversusamerica.net.internationalhomeschoolday.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgISBEPs8DPheaUoTrzDnrvFoKljMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzEyMTAyMDAwMDVaFw0yNDAzMDkyMDAwMDRaMD8xPTA7BgNVBAMT NGFjbHV2ZXJzdXNhbWVyaWNhLm5ldC5pbnRlcm5hdGlvbmFsaG9tZXNjaG9vbGRh eS5vcmcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ14OBE2u2KOBR F0U2LDDNzcVc6atPoAh6XrNDstoDPrQIR8LPgzTlmLC/h4Udib4WzbWV4ajhuLvi BVBfAN6hY0oVFSCOqKLyHI1TWrH4o8ZAreEgj66VPKiBoxAA/YbZMcBv+gIA3LsG d6wtxfHyqhmLKnDTcTe4wGr9DT9nPcAaUwU9IJ4qcI93lwGajf626f1PMxXMkXmT OoZsyqH6W6doXyvljWZGktNV2ZuJ9nWaSSnYfdD2Xs8cwOvhBa4mFYdIAgsZ+vxG 84QQNNMg+sYv8hfsJg1ht9P3p0RnhUlGrnG2iZSsSph43t1YQcxJkaDM3QoQo2sB FLK7DHq5AgMBAAGjggNEMIIDQDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYI KwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFDJ9tkCf cZ7oY9akgl5TWzPhweNmMB8GA1UdIwQYMBaAFBQusxe3WFbLrlAJQOYfr52LFMLG MFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iu b3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5jci5vcmcvMIIBSwYDVR0R BIIBQjCCAT6CNGFjbHV2ZXJzdXNhbWVyaWNhLm5ldC5pbnRlcm5hdGlvbmFsaG9t ZXNjaG9vbGRheS5vcmeCEWFuaW1hbHBhcmFkZXMuY29tgiBhei5jb3NmYWN0cy5v cmcuZXJpbmdlZXZvaWNlLm5ldIIdY2hyaXN0bWFzbGlnaHRzaHVudGluZ3Rvbi5j b22CCmplZXp0di5jb22CFmxlYXRoZXJjb3dib3lib290cy5jb22CC2xvdmFub3Yu Y29tgjdyZXBsaWNhZGVzaWduZXJoYW5kYmFncy5jb20udHJhbnNmb3JtYXRpb25l eHRlcmlvcnMuY29tgiJyaXNldXBsZWdhbC5uZXQuNWNhcmRpbmFsY3JlZWsuY29t gg9yb2NrbGFuZC5yZWFsdHmCE3RoYXRzb3V0cmFnZW91cy5jb20wEwYDVR0gBAww CjAIBgZngQwBAgEwggEEBgorBgEEAdZ5AgQCBIH1BIHyAPAAdgA7U3d1Pi25gE6L MFsG/kA7Z9hPw/THvQANLXJv4frUFwAAAYxVh7E/AAAEAwBHMEUCIQCHaVe89FsT 5LO1jDUrZ0jck6J6ybqS5OCQsJuoR+VfUgIgHD5R+8Br+aveoEzqybwlLrWEh52n uvpKRERl4tntY8gAdgBIsONr2qZHNA/lagL6nTDrHFIBy1bdLIHZu7+rOdiEcwAA AYxVh7FGAAAEAwBHMEUCIAdgVMMGxn6NTm4dWCoA2esO42pOLJRK9xJ43loyKqb3 AiEAvutV/v8YoDtt+Pl67mRyMG6yHBV2YZExuogK//sq08MwDQYJKoZIhvcNAQEL BQADggEBAKQHqauCwipI5t62HFoNm9MRxw+BnpkFkQDX7CZpmweExOVyyegoGbtp vYuKM3OIsvKexPbWXgd9yNP/2VuhrfXbxFTA55XfpRrpmh1QMewr04nbhoR3hIrR OJPCkpCNUmfdldKflzqeplfbqodJ1iw/O3+IjNk3W2aHgt0B5oI8CCw3UR29iOQC s6oFtUGf7yp7ehSTH8+Q0qaD0jAB//i/Dw4YBKxg1xp0TysHaZLfDx3/jD4usI4Z IZTi1yyA0C9Ihj5vJ6f0zPtCSS0g7UcONDrsjsKDCr3jTSmnUvE71mwPhQZQ7Pfr pQ9+19Af2hLBnCT54DWAqraDcD0JJLg= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAydeDgRNrtijgURdFNiww zc3FXOmrT6AIel6zQ7LaAz60CEfCz4M05Ziwv4eFHYm+Fs21leGo4bi74gVQXwDe oWNKFRUgjqii8hyNU1qx+KPGQK3hII+ulTyogaMQAP2G2THAb/oCANy7BnesLcXx 8qoZiypw03E3uMBq/Q0/Zz3AGlMFPSCeKnCPd5cBmo3+tun9TzMVzJF5kzqGbMqh +lunaF8r5Y1mRpLTVdmbifZ1mkkp2H3Q9l7PHMDr4QWuJhWHSAILGfr8RvOEEDTT IPrGL/IX7CYNYbfT96dEZ4VJRq5xtomUrEqYeN7dWEHMSZGgzN0KEKNrARSyuwx6 uQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 371563007321262025844418236482755076598115 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-10 20:00:05 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-09 20:00:04 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'acluversusamerica.net.internationalhomeschoolday.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25480173058751549791164088852789067061669268200825728492970439395783462274891458270054859647234728053836470892610962842290393946617347545194720648858633384381189257275682984058494286587484302890071543721212997403795699931597760538425788510751795227440640633538157369253192775010168406619061906415185861026297189520116007960317955716913992710050730482363803482132665537725036932372515089256086795637099045209756212702334173872316766674287850253275644446344007605869819091420119484943718836647580098023254750568345757634885022703159310204445503820763874144777392976747991358203970452667127343444870035488902717673077433 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 327db6409f719ee863d6a4825e535b33e1c1e366 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (322 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acluversusamerica.net.internationalhomeschoolday.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'animalparades.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'az.cosfacts.org.eringeevoice.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'christmaslightshuntington.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jeeztv.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leathercowboyboots.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lovanov.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'replicadesignerhandbags.com.transformationexteriors.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'riseuplegal.net.5cardinalcreek.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rockland.realty' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thatsoutrageous.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f00076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018c5587b13f0000040300473045022100876957bcf45b13e4b3b58c352b6748dc93a27ac9ba92e4e090b09ba847e55f5202201c3e51fbc06bf9abdea04ceac9bc252eb584879da7bafa4a444465e2d9ed63c800760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c5587b14600000403004730450220076054c306c67e8d4e6e1d582a00d9eb0ee36a4e2c944af71278de5a322aa6f7022100beeb55feff18a03b6df8f97aee6472306eb21c1576619131ba880afffb2ad3c3 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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