profoundstrategy.org

Issued by R3

About this certificate

This digital certificate with serial number 04:31:dc:52:1a:93:4d:a8:1a:1d:4b:0a:72:e5:2a:ca:20:96 was issued on by Let's Encrypt.

With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=profoundstrategy.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:31:dc:52:1a:93:4d:a8:1a:1d:4b:0a:72:e5:2a:ca:20:96
Serial Number (int): 365415836172595275797261449698500170883222
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 7b:25:bf:02:f0:b3:1a:fd:38:43:f0:73:71:92:9c:f7:b5:22:47:03
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 05:4b:7d:82:45:ae:76:56:b1:27:a2:84:5b:fa:0a:1d:e5:60:17:42
Fingerprint (sha256): 04:3b:21:03:fb:4f:6a:6e:48:f8:16:4a:73:ef:84:0b:c7:10:d7:3a:c9:7e:fb:f8:62:1e:9d:c8:76:a2:4c:9f

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate profoundstrategy.org

7

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for profoundstrategy.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aspectiums.com
biosciencefund.com
herdcredit.com
profoundstrategy.org
rxsugarisgreat.com
seacontainerhome.com
videogameforum.com

Other certificates including the domain name profoundstrategy.org

(limited to 100 certificates)
profoundstrategy.org
art.estate
profoundstrategy.org
jaredcummingsvideo.org
a-sap.ca
insta.bible
thequalityinformationinstitute.com.profoundstrategy.org
bramptonhomebuyers.ca
www.epik.africa
www.epik.africa
templar.vc
sanm.co.za
enerpac.asia
a-sap.ca
enerpac.asia
mississippisportsphysicians.com
xnft.llc
3233.org
bramptonhomebuyers.ca
cbd-store.org
skate.vc
iotcreations.com
profoundstrategy.org
profoundstrategy.org

Certificate

The complete raw certificate details for profoundstrategy.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8CRC5SBAo2krBdmEuRGg
LbzcXIeUuwQZd7Clc9swncUwjupq5/lU4CYDYj/J5luMc9pJiIQHOckpmID4tGHj
IXbE6kbFG2KMZ4JJpnvbzLX9DwDbJTfHmlEbSERGtrKrUUUR+KRcSADMgPiy17/4
sWjDNZm1+tq/wQnjHm8FJ2zpk4zOzvWg5gjIxBnOYJOeoCtXV/+IcVN+FWOHPPCy
z5P7FE6bmvqwDKngUxveLZoRAtQA2XgPHKMq4yVkD99AHyAKUhliLYaGx0VbFfl3
Hn/TL0sxeMM5neVxP2Y+8uWFI3g/v/UWpZxrErX1DYNVgxYKxUsxhU949e4PXbqm
3QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 365415836172595275797261449698500170883222
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-14 16:55:16 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-13 16:55:15 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'profoundstrategy.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30315074309605074235768992506693996904194953508719675754465218765575337745592240970411665919217018173361842777768239389292593497912454126441226910702212282906844340362057624349912222804924220050200784864344610822934145352576964184578646344761239371888224897691545773752902235742563366255386740009795635171387724232128070216743358604808618846176722155879745125623138970888574885936055073223167469408709227829414260794071299760576376996911268096094919421163526961902309016870778790123666714254255504146800672940356388831400343583167288390120826423206677616876161554367937372822307667534710250853814389606354182584575709
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7b25bf02f0b31afd3843f07371929cf7b5224703
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (139 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aspectiums.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biosciencefund.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'herdcredit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'profoundstrategy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rxsugarisgreat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seacontainerhome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'videogameforum.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018eddbfc545000004030047304502204d5814233ad51ffbacf412826f188da4d351b5ee04e5fe683f95f5e2a8ee2b000221008ca4d190469f3675c16dda55922c6d805477c7fcb8886bbd7278dc2190173b0f007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018eddbfc5400000040300483046022100fb8abca3e6f05c48404e1825591cac94c196205bd91df866950c06a92eae57b402210094e15e20926b663cc92a2ccecd97385f608ec8d60b796b15855b2627550f7f7f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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