lexingtonrepublicans.org

Issued by R3

About this certificate

This digital certificate with serial number 03:72:26:d4:52:44:83:78:44:d2:cc:d6:cf:73:18:6d:ce:96 was issued on by Let's Encrypt.

With 16 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=lexingtonrepublicans.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:72:26:d4:52:44:83:78:44:d2:cc:d6:cf:73:18:6d:ce:96
Serial Number (int): 300180660723627351444125393871408387182230
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 5d:bb:6e:de:38:3e:f7:03:9e:e1:ec:1f:a1:cf:bb:f9:7c:5c:ce:c8
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): ea:66:6a:e3:f6:04:2a:fc:25:30:7b:06:b6:a0:23:b2:b9:f4:01:20
Fingerprint (sha256): 05:4d:67:6d:a6:6c:3d:77:f4:ab:58:9b:f2:a2:68:d0:88:10:ec:6f:84:10:5b:51:17:d4:a9:ee:a9:63:ae:1b

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate lexingtonrepublicans.org

16

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lexingtonrepublicans.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

adultplayshop.com
bathroom-heaters.com
bestcartransporter.com
blackjackblog.com
dallasnissan.com
gpucharter.com
htj.co.in
leicestersquare.com
lexingtonrepublicans.org
lindellevent.com
nimhforsale.com
personaltireassistant.com
signsevansville.com
threatspy.com
vpm.architechvr.group
www.yeshuaismessiah.com

Other certificates including the domain name lexingtonrepublicans.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for lexingtonrepublicans.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3QV1NmwxUIBap3HzeSW
R0Tm+GPq9KKqdl8WVeCdMsFLj3iEP30snVTvtsChniUw79+WFjjQCmhPr0LCyig5
3CrZUiXE0G1jWymTQxmHU4sCO/i5fsVVEf5cnrGslpLbc6fZxppiEBkFeLQ1aB0k
FL1QCz/601AHIrAdVuPUg0MbAcEdyjjyvkcJda1/4lkQ1cQqWvHOqiKgg/++IS/u
FCk+5C3T3i30DxcpBAHLdUPOG6YnMXZzrtI89+1h9sXz1AZ9WESana6EFxuheulG
LdfcChAR+c3jizj5IBW0SoRJ9SAznm1EBHMU5UPDcLl+zPTLSf8xN3xVKBZw6Lzk
4QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 300180660723627351444125393871408387182230
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-18 06:04:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-18 06:04:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lexingtonrepublicans.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22653900373548175487559697405956096622565271014437054544794636918259203585734702110983096398429016272542747608931106415614493367917759198370539120368745187736793292150045873590562055574498718232191022531380234712091357924691532357774897901493526532095483187870550620974549560957624066001155755831089954620390365174141086233317409311648874231960059919579337259682523750439063787577057704799520739985109887593630562505939596870223122611580818626167763794239153750905812283962355875620676914852699914959985939269439906601981558053266328009678029791578510000811196091021716350331696115276363223155382127397072128884663521
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5dbb6ede383ef7039ee1ec1fa1cfbbf97c5ccec8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (326 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adultplayshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bathroom-heaters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestcartransporter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blackjackblog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dallasnissan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gpucharter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'htj.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leicestersquare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lexingtonrepublicans.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lindellevent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nimhforsale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'personaltireassistant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'signsevansville.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'threatspy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vpm.architechvr.group'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yeshuaismessiah.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018dbb0771330000040300463044022030fe0420a6fb93fedeaef2119b4dba62d666fa52a5623f16b5ebe8d6369ffdc102203ebe3d181410ffd0f5da202fda92be43577746e0377079bcd1ada238a8b4faa3007700a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018dbb0770ee00000403004830460221008200ef1c84f0d07a4f2d8223ab72dd2e76262bd58395abf2bfe119c612739f0c022100ef01ac698c491fec2df2a680acbc47cc8ed7aa6ce1451eaea1bb8dcc132e0fa0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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