leadingreach.com

Issued by R3

About this certificate

This digital certificate with serial number 04:fb:9a:69:15:fb:09:1a:f6:42:92:96:dd:57:17:1d:a9:78 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=leadingreach.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:fb:9a:69:15:fb:09:1a:f6:42:92:96:dd:57:17:1d:a9:78
Serial Number (int): 434065264572537252544986138957890801478008
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 9a:72:d3:49:db:32:81:ef:d9:94:06:83:6f:18:84:13:39:61:13:5a
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): b2:83:81:62:81:72:5a:23:57:06:c4:eb:2d:cb:28:05:85:91:e5:b9
Fingerprint (sha256): 03:07:39:5c:89:ea:80:7e:86:57:94:9c:07:5a:1a:0d:68:ff:9a:7f:73:e3:8e:c5:c1:30:ea:8a:94:f5:99:1b

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate leadingreach.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for leadingreach.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

leadingreach.com

Other certificates including the domain name leadingreach.com

(limited to 100 certificates)
*.leadingreach.com
www.leadingreach.com
sni.cloudflaressl.com
www.leadingreach.com
leadingreach.com
adminsupport.maxwellhealth.com
billing.leadingreach.com
billing.leadingreach.com
*.leadingreach.com
support.swimlane.com
www.leadingreach.com
support.leadingreach.com
fdus-22.freshdesk.com
sni.cloudflaressl.com
fdus-22.freshdesk.com
leadingreach.com
*.leadingreach.com
*.leadingreach.com
adminsupport.maxwellhealth.com
leadingreach.com
support.swimlane.com
billing.leadingreach.com
fdus-22.freshdesk.com
fdus-22.freshdesk.com
leadingreach.com
adminsupport.maxwellhealth.com
billing.leadingreach.com
leadingreach.com
adminsupport.maxwellhealth.com
billing.leadingreach.com
subscriptions.seqlogic.com
support.leadingreach.com
leadingreach.com
leadingreach.com
fdus-22.freshdesk.com
membership.prozz.co
my.techonpurpose.net
www.leadingreach.com
direct.leadingreach.com
www.leadingreach.com
leadingreach.com
www.leadingreach.com
billing.leadingreach.com
fdus-22.freshdesk.com
billing.leadingreach.com
healthcare.leadingreach.com
my.techonpurpose.net
*.leadingreach.com
my.techonpurpose.net
www.leadingreach.com
adminsupport.maxwellhealth.com
*.leadingreach.com
adminsupport.maxwellhealth.com
subscriptions.thedoodleproject.com
www.leadingreach.com
sni.cloudflaressl.com
billing.leadingreach.com
*.leadingreach.com
account.rmgfinancial.org
www.leadingreach.com
support.leadingreach.com
fdus-22.freshdesk.com
www.leadingreach.com
ssl953416.cloudflaressl.com
adminsupport.maxwellhealth.com
account.rmgfinancial.org
subscriptions.techguyryan.us
leadingreach.com
*.leadingreach.com
adminsupport.maxwellhealth.com
leadingreach.com
subscriptions.prozz.co
adminsupport.maxwellhealth.com
sni.cloudflaressl.com
www.leadingreach.com
direct.leadingreach.com
leadingreach.com
*.leadingreach.com
tab-dbtest.leadingreach.com
direct.leadingreach.com
adminsupport.maxwellhealth.com
billing.leadingreach.com
sni.cloudflaressl.com
membership.prozz.co
www.leadingreach.com
leadingreach.com
leadingreach.com
leadingreach.com
leadingreach.com
leadingreach.com
adminsupport.maxwellhealth.com
direct.leadingreach.com
leadingreach.com
leadingreach.com
leadingreach.com
support.leadingreach.com
adminsupport.maxwellhealth.com
billing.leadingreach.com
www.leadingreach.com
www.leadingreach.com

Certificate

The complete raw certificate details for leadingreach.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+1MfaR8JWK/7vlc2fC9
74cwAchst2LRzffF82xVVt+HvBcLm0H+W1NWOFvD7I1RqjdVeljxy/EblN2cEOpU
5HF5nnZiyKh6RhpB8ja4YM+7kV9cLWM772GEZSayjcy2w7hEC449JeyrsnYzz8u+
b67ZxY5Mu64kbVb0lZP2gkZQQO4D7kRQh8qdr53dEhn0e8kpzDxX05dm8Aw4BFW3
OAfJ1fVr8n6UvlmT2kf+snendEJdEkHV6JakbFOvc4IicAArt1nMdfLDSbgamGKM
qTgeIOIqHae60XZ4VCiOSOhNys9TKIAmwHxG29k61bS8XEefjCGW0NcHauaapdNR
lwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 434065264572537252544986138957890801478008
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-18 18:26:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-16 18:26:54 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'leadingreach.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18674047225681905932001576057077730008081373875716742338743892322613777625710959283488270653800631696557446312108418095829788266039559138121952160162473929333563749793242740631547880724448376087496727548592675244284827440068449436760235271574142317235458440115944236376472286969591106132717141869626408663606448267771085843624721019084433619419448294267998401500150092795867799437985912420440515549522062067642748355478236738519562694071624869709554293274588039880023850701397153596227688174626325545436127072971467535021325697991028856141534567435586291554176435606488138504933751406196176753199136778920281939071383
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9a72d349db3281efd99406836f1884133961135a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leadingreach.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000186f630744100000403004730450220639c70f789d7aaaedab64564c9ddae1f1fdf5d45403fd3d83d78d934c2ed082a022100a892c772a6cafead87dd51a1996277edd511eb7d6545b1a934534a0b5a5acdd90076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000186f63074560000040300473045022100c12f03b774a07a07c45f39f16e4dd9cdbe0a0dced1cbd01577a1908ba02e0cdc02201e8f59eeec80fd7423c3147b1258c693944ea8adac8c0a91f601595b2a5c0b28
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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