openforgood.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:e7:2c:f0:f5:d7:b3:72:a9:6a:e9:b2:f2:c9:81:91:c3:2e was issued on by Let's Encrypt.
With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=openforgood.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:e7:2c:f0:f5:d7:b3:72:a9:6a:e9:b2:f2:c9:81:91:c3:2eSerial Number (int): 340001821723358053926529521204511179391790
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 11:13:fe:ab:b0:4e:13:a0:2e:45:bd:d4:fd:c4:3d:34:0c:d0:48:1f
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 23:98:2c:a0:89:1b:c0:15:34:a1:d5:d7:55:a1:a9:78:a5:02:b3:2f
Fingerprint (sha256): 03:a9:16:ed:2a:d2:b5:9d:c7:28:94:bd:41:a3:fb:c3:98:a1:96:44:af:1d:96:37:9d:9b:e5:bd:f7:7f:b3:5c
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate openforgood.com
6
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for openforgood.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
cpanel.openforgood.com
mail.openforgood.com
openforgood.com
webdisk.openforgood.com
webmail.openforgood.com
www.openforgood.com
mail.openforgood.com
openforgood.com
webdisk.openforgood.com
webmail.openforgood.com
www.openforgood.com
Other certificates including the domain name openforgood.com
(limited to 100 certificates)
jspan.org
openforgood.com
www.javits.openforgood.com
jspan.org
adap.openforgood.com
vps2.openforgood.com
openforgood.com
openforgood.com
mail.openforgood.com
vps2.openforgood.com
openforgood.com
adap.openforgood.com
vps4.openforgood.com
vps2.openforgood.com
joshuajavits.com
openforgood.com
vps3.openforgood.com
vps4.openforgood.com
mail.jspan.openforgood.com
openforgood.com
openforgood.com
vps4.openforgood.com
openforgood.com
openforgood.com
joshuajavits.com
jspan.org
vps3.openforgood.com
vps4.openforgood.com
vps.openforgood.com
openforgood.com
vps.openforgood.com
openforgood.com
adap.openforgood.com
mail.openforgood.com
openforgood.com
jspan.org
vps.openforgood.com
adap.openforgood.com
jspan.org
jspan.org
vps5.openforgood.com
adap.openforgood.com
joshuajavits.com
adap.openforgood.com
joshuajavits.com
vps6.openforgood.com
mail.jspan.openforgood.com
openforgood.com
www.javits.openforgood.com
jspan.org
adap.openforgood.com
vps2.openforgood.com
openforgood.com
openforgood.com
mail.openforgood.com
vps2.openforgood.com
openforgood.com
adap.openforgood.com
vps4.openforgood.com
vps2.openforgood.com
joshuajavits.com
openforgood.com
vps3.openforgood.com
vps4.openforgood.com
mail.jspan.openforgood.com
openforgood.com
openforgood.com
vps4.openforgood.com
openforgood.com
openforgood.com
joshuajavits.com
jspan.org
vps3.openforgood.com
vps4.openforgood.com
vps.openforgood.com
openforgood.com
vps.openforgood.com
openforgood.com
adap.openforgood.com
mail.openforgood.com
openforgood.com
jspan.org
vps.openforgood.com
adap.openforgood.com
jspan.org
jspan.org
vps5.openforgood.com
adap.openforgood.com
joshuajavits.com
adap.openforgood.com
joshuajavits.com
vps6.openforgood.com
mail.jspan.openforgood.com
Certificate
The complete raw certificate details for openforgood.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFzzCCBLegAwIBAgISA+cs8PXXs3Kpaumy8smBkcMuMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAyMjAwNzMwMzRaFw0y MDA1MjAwNzMwMzRaMBoxGDAWBgNVBAMTD29wZW5mb3Jnb29kLmNvbTCCASIwDQYJ KoZIhvcNAQEBBQADggEPADCCAQoCggEBAMq8dMCh80COUc4vgidKtqZ8UwN9WN4s vgZyNBveK34Hvttq7IlRy7S5Iy2wv2mUbfACCVnzMvPJAzvzFzaOuPi6LP22WTH3 y06kJqvo6nFkxxDR1cgvzgR1f/JigLwAY4p+K/i/aX4wVZ3NQFO4az3wiDmJLTNx RNSVe50nHYmZn35DSeurwgggptjwdBnoOtqYF5eJNb2v72TE0OPhV1Rvd/uDKogh VSC6506zGo8MAQpLd3GsiRXwiP1gzZ5D6trKgKd1WLPBUfwWM17VLO9awEmPrdV9 HhbBXtG7xnwlqSHbv+Vo4xHEgHrrV/ILIqweVxjb/fnT/Kz2ltcv2BUCAwEAAaOC At0wggLZMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYB BQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUERP+q7BOE6AuRb3U/cQ9NAzQ SB8wHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYBBQUHAQEE YzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5cHQu b3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2VuY3J5cHQu b3JnLzCBkQYDVR0RBIGJMIGGghZjcGFuZWwub3BlbmZvcmdvb2QuY29tghRtYWls Lm9wZW5mb3Jnb29kLmNvbYIPb3BlbmZvcmdvb2QuY29tghd3ZWJkaXNrLm9wZW5m b3Jnb29kLmNvbYIXd2VibWFpbC5vcGVuZm9yZ29vZC5jb22CE3d3dy5vcGVuZm9y Z29vZC5jb20wTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAm BggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEFBgorBgEE AdZ5AgQCBIH2BIHzAPEAdwBep3P531bA57U2SH3QSeAyepGaDIShEhKEGHWWgXFF WAAAAXBhuFDaAAAEAwBIMEYCIQCeaV0IM59iyW43HIAWeaCy9+o5tmAieg9QXG8L PP7JZwIhAKSaIUNP24UmnXP8GMtbi7LGahCD1qxQ/GCzqgkE5cUaAHYAB7dcG+V9 aP/xsMYdIxXHuuZXfFeUt2ruvGE6GmnTohwAAAFwYbhRKAAABAMARzBFAiAMRi47 4tpJJxgu6limwl5s3nUW3hhsztSLfqG/4n/C9QIhAMgr5GUyAcY48WogHDZUpSb1 BPnQNEmIvKxvBCrwGdl+MA0GCSqGSIb3DQEBCwUAA4IBAQBmneArkWIrOuTRsnt5 flXz59FmWdR5EN1bcbK78s8j1t+PgSXpJAQ3OQoWHqE5GTPkUYOg44m2dQPgJWv5 kjopfWjbWwrZ606o2YK9RGUoo6/E7hI8xYS+zir8nZZpnRtr8QeZbrTJKaM2sgoT MFrYsZMzYVLLaTyYniHkNxvbu6kqc9n0i8sPjLOdYO5IxelvG3nYx+kuWPVHd9ik mz0UslMS9SJ6BFVnrHQc85K2Wti6Xg4Orwgeyt4bh2CUys2nMf0O4a+IcYPIdvmC /7+qe69Jhf+6QnzbE+2xgs759xo+bBbA8Jt+Kbgw7zlUC4qgCNuqE4yJFOI0IR9i EbU8 -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyrx0wKHzQI5Rzi+CJ0q2 pnxTA31Y3iy+BnI0G94rfge+22rsiVHLtLkjLbC/aZRt8AIJWfMy88kDO/MXNo64 +Los/bZZMffLTqQmq+jqcWTHENHVyC/OBHV/8mKAvABjin4r+L9pfjBVnc1AU7hr PfCIOYktM3FE1JV7nScdiZmffkNJ66vCCCCm2PB0Geg62pgXl4k1va/vZMTQ4+FX VG93+4MqiCFVILrnTrMajwwBCkt3cayJFfCI/WDNnkPq2sqAp3VYs8FR/BYzXtUs 71rASY+t1X0eFsFe0bvGfCWpIdu/5WjjEcSAeutX8gsirB5XGNv9+dP8rPaW1y/Y FQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 340001821723358053926529521204511179391790 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-20 07:30:34 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-20 07:30:34 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'openforgood.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25593068752061487132190237812666261098974964407066078769518452973872286717547494413697849807080073832244864335150700484101238933370303334011186377386689364698414106583071068561249474492531152250959059675591176707981036625449553665736699473881203589369354239402281978462059070123997777002135188644998109171200552552379154351060763097526070678973018668812442019787142723671092088206868932362012112141264341952503371938148964125916369280609078795072579698514379960476331378685022017787234634546770630555879664666721044807939195420619726387604032048624160399841593273929401000351262540100379913467239753502911412099340309 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 1113feabb04e13a02e45bdd4fdc43d340cd0481f . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (137 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.openforgood.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.openforgood.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'openforgood.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.openforgood.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.openforgood.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.openforgood.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f10077005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000017061b850da00000403004830460221009e695d08339f62c96e371c801679a0b2f7ea39b660227a0f505c6f0b3cfec967022100a49a21434fdb85269d73fc18cb5b8bb2c66a1083d6ac50fc60b3aa0904e5c51a00760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000017061b85128000004030047304502200c462e3be2da4927182eea58a6c25e6cde7516de186cced48b7ea1bfe27fc2f5022100c82be4653201c638f16a201c3654a526f504f9d0344988bcac6f042af019d97e . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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