olympia.ac
Issued by R3
About this certificate
This digital certificate with serial number 03:18:c9:78:ee:a2:d5:e6:f4:bc:06:b3:7b:df:75:bf:69:6e was issued on by Let's Encrypt.
With 11 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=olympia.ac
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:18:c9:78:ee:a2:d5:e6:f4:bc:06:b3:7b:df:75:bf:69:6eSerial Number (int): 269771437344273702844926511990420335978862
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 4e:01:ac:4c:f3:a0:fb:72:f9:0a:f2:3a:85:95:7e:8c:45:3c:5c:11
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 45:f9:95:a2:3b:8c:88:36:29:6c:80:a9:81:26:96:7f:a9:74:0a:b9
Fingerprint (sha256): 01:21:7a:33:d1:fa:0e:cc:82:28:49:a8:dc:b1:48:cd:38:ef:9a:d1:4d:69:a8:f5:97:05:9f:b3:86:a6:4d:94
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate olympia.ac
11
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for olympia.ac
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
asmszon.com
csilver.com
olympia.ac
orlandoroofrenewal.com
pestpiping.com
pressurewashwintergarden.com
sanantoniodayspas.com
stockmediaimages.com
thegolddragon.com
vivosity.com
woodfordcounty.com
csilver.com
olympia.ac
orlandoroofrenewal.com
pestpiping.com
pressurewashwintergarden.com
sanantoniodayspas.com
stockmediaimages.com
thegolddragon.com
vivosity.com
woodfordcounty.com
Other certificates including the domain name olympia.ac
(limited to 100 certificates)
olympia.ac
dumptruck.ca
olympia.ac
olympia.ac
olympia.ac
olympia.ac
olympia.ac
olympia.ac
olympia.ac
dumptruck.ca
5272653.ca
marsexpress.ca
dumptruck.ca
olympia.ac
olympia.ac
marsexpress.ca
5272653.ca
olympia.ac
dumptruck.ca
trailerupholstery.ca
olympia.ac
marsexpress.ca
olympia.ac
olympia.ac
dumptruck.ca
olympia.ac
olympia.ac
olympia.ac
shiftcrm.ca
shiftcrm.ca
marsexpress.ca
34725625397.ca
olympia.ac
olympia.ac
olympia.ac
dumptruck.ca
olympia.ac
cbdc.co.za
olympia.ac
laughing.pizza
olympia.ac
olympia.ac
dumptruck.ca
olympia.ac
dumptruck.ca
olympia.ac
olympia.ac
olympia.ac
olympia.ac
olympia.ac
olympia.ac
olympia.ac
dumptruck.ca
5272653.ca
marsexpress.ca
dumptruck.ca
olympia.ac
olympia.ac
marsexpress.ca
5272653.ca
olympia.ac
dumptruck.ca
trailerupholstery.ca
olympia.ac
marsexpress.ca
olympia.ac
olympia.ac
dumptruck.ca
olympia.ac
olympia.ac
olympia.ac
shiftcrm.ca
shiftcrm.ca
marsexpress.ca
34725625397.ca
olympia.ac
olympia.ac
olympia.ac
dumptruck.ca
olympia.ac
cbdc.co.za
olympia.ac
laughing.pizza
olympia.ac
olympia.ac
dumptruck.ca
olympia.ac
Certificate
The complete raw certificate details for olympia.ac in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFpTCCBI2gAwIBAgISAxjJeO6i1eb0vAaze991v2luMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDAyMjkxMTQ3NDNaFw0yNDA1MjkxMTQ3NDJaMBUxEzARBgNVBAMT Cm9seW1waWEuYWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCLwAQ XJzyEFqFb0HJshheKB7LGMAVtV8wI5pnWb9/vK//9oOenadnF10wMMah1iAcvSgg 4u/TNkYExIsRp77LAuw3DCz3mWtnreq+tmy/bMUPnbHiko/Iw62J2FXaK/2Wx5Dq 07dJKiTw8cCi3XVFFmyiwree+ARY7bEcNeT9zn8H2x1yq7MSuSvaJygts2jASqCp DLS6tTVN9AKDYIvADx111qMchhRIi19zVYjwee1VUaufg43xlGLcddFDlQ5BhrUH VvyXy3J1H1yTBsiUiLR/CxKtAdphZlKJH+W7d9//bGFtgCI6lh+hiGRClFJvoHqL 7C6Om5URvuqkqb8nAgMBAAGjggLQMIICzDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0l BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYE FE4BrEzzoPty+QryOoWVfoxFPFwRMB8GA1UdIwQYMBaAFBQusxe3WFbLrlAJQOYf r52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0cDovL3IzLm8u bGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5jci5vcmcvMIHZ BgNVHREEgdEwgc6CC2FzbXN6b24uY29tggtjc2lsdmVyLmNvbYIKb2x5bXBpYS5h Y4IWb3JsYW5kb3Jvb2ZyZW5ld2FsLmNvbYIOcGVzdHBpcGluZy5jb22CHHByZXNz dXJld2FzaHdpbnRlcmdhcmRlbi5jb22CFXNhbmFudG9uaW9kYXlzcGFzLmNvbYIU c3RvY2ttZWRpYWltYWdlcy5jb22CEXRoZWdvbGRkcmFnb24uY29tggx2aXZvc2l0 eS5jb22CEndvb2Rmb3JkY291bnR5LmNvbTATBgNVHSAEDDAKMAgGBmeBDAECATCC AQMGCisGAQQB1nkCBAIEgfQEgfEA7wB1AEiw42vapkc0D+VqAvqdMOscUgHLVt0s gdm7v6s52IRzAAABjfToBrYAAAQDAEYwRAIgMRIgsaBBSCYi6jS7V5q00t+QCSPj oFXhzF3eC3lpcvwCIAeMD/tYe0jIzX+YNOVVEquKz/7sydNCVpwSmzg3Gvu5AHYA ouK/1h7eLy8HoNZObTen3GVDsMa1LqLat4r4mm31F9gAAAGN9OgGvgAABAMARzBF AiA2//BVi5TL682yd641rpMOU0J0Bu8ONRlgI1sSAOmdYAIhAJe4qkUfzNjq4U1F K5UR69Gvkkn6yqhuVfcoFjYk3JGVMA0GCSqGSIb3DQEBCwUAA4IBAQAjkgPG5STi 12pt5QCvpz1vdcC6irbF6j1uTwUu+h/NCOnyp+9Zov2Nxr3eCPgfPyaiCc0Fj7lB yXrwdsQBVFdtt3n/np1DB7c1U5ZUGmcCRprrGyjJvV9kycP/A5wHbOg4WQQSWmAT ACRpj/mClP9XmGQUSLyCRBUBh3ZWtP/FUmkIoyvVZdgu7QL5dvZXZzWwgjjEXoLT /lZ7VPqEx4jIEYmMS5eRAMAkpt7Zl6tC8KQV9RKrLhiyO0LaSc6yASQilstjHMOL jFf0lOCKfXbChdmUuOR3FjH4AJ4CMq8ljrm+rsb3Q679du0zBtr2NB7I7500UnEY /rnLJNQlBJiv -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwi8AEFyc8hBahW9BybIY XigeyxjAFbVfMCOaZ1m/f7yv//aDnp2nZxddMDDGodYgHL0oIOLv0zZGBMSLEae+ ywLsNwws95lrZ63qvrZsv2zFD52x4pKPyMOtidhV2iv9lseQ6tO3SSok8PHAot11 RRZsosK3nvgEWO2xHDXk/c5/B9sdcquzErkr2icoLbNowEqgqQy0urU1TfQCg2CL wA8dddajHIYUSItfc1WI8HntVVGrn4ON8ZRi3HXRQ5UOQYa1B1b8l8tydR9ckwbI lIi0fwsSrQHaYWZSiR/lu3ff/2xhbYAiOpYfoYhkQpRSb6B6i+wujpuVEb7qpKm/ JwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 269771437344273702844926511990420335978862 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-29 11:47:43 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-29 11:47:42 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'olympia.ac' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24513407850330061053280753060871499501379999893972943024970176378229164891889603740356955041291958147768559987774544268981687438101325920834181816656206004824297820473298930172632762966067583669135724085253080473948507780063106453018050906666788477069031875181871052836331277675167593113258458331183939968054258111903929330614030934585172149100540712692250836819858019076594617802296203987462641915289801933361264870433538393178975054456063779523677706878783724885751631849233198999535768018197995315503237936600671654378588041062760856246667603437412698994915120095349479234989854099373507501305312050830970582581031 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 4e01ac4cf3a0fb72f90af23a85957e8c453c5c11 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (209 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asmszon.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csilver.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olympia.ac' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orlandoroofrenewal.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pestpiping.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pressurewashwintergarden.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanantoniodayspas.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stockmediaimages.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thegolddragon.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vivosity.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'woodfordcounty.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018df4e806b600000403004630440220311220b1a041482622ea34bb579ab4d2df900923e3a055e1cc5dde0b796972fc0220078c0ffb587b48c8cd7f9834e55512ab8acffeecc9d342569c129b38371afbb9007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018df4e806be0000040300473045022036fff0558b94cbebcdb277ae35ae930e53427406ef0e351960235b1200e99d6002210097b8aa451fccd8eae14d452b9511ebd1af9249facaa86e55f728163624dc9195 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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