sheliajmitzva.org

Issued by R10

About this certificate

This digital certificate with serial number 03:10:fc:a5:f6:e9:16:57:86:30:93:87:97:14:69:85:60:18 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=sheliajmitzva.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:10:fc:a5:f6:e9:16:57:86:30:93:87:97:14:69:85:60:18
Serial Number (int): 267117202857875051246406233203790821285912
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: c4:a9:eb:6e:eb:55:d6:5c:de:b7:1d:92:59:8e:69:b0:9b:41:29:25
AuthorityKeyId: bb:bc:c3:47:a5:e4:bc:a9:c6:c3:a4:72:0c:10:8d:a2:35:e1:c8:e8

Fingerprint (sha1): b1:41:3e:74:af:20:a4:e0:97:50:d7:f8:be:f3:2d:cf:1e:2e:b2:7c
Fingerprint (sha256): 05:c4:45:32:5b:ae:62:24:3b:81:96:88:41:f0:2f:a9:d1:2b:bb:90:0c:23:32:45:77:8e:19:b2:ee:26:0f:76

Issuing Certificate URL: http://r10.i.lencr.org/

Revocation information

OCSP Server: http://r10.o.lencr.org

Check the revocation status for certificate sheliajmitzva.org

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sheliajmitzva.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sheliajmitzva.org
www.sheliajmitzva.org

Other certificates including the domain name sheliajmitzva.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for sheliajmitzva.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAo9X8b5OReGAb1ZhTAmA7
8jl/i1Q0z2GFDF+mZHikj5WgTZXijwxFpJiB6X/knHbYYLTVVfIbUerfc2JnrT71
FU7kIsMZeCbe9txijrO1bJB2QzlKJgvjuEiKDAfpITFif7mCir2GkMWhrQfiAwLr
IRx5SOU5W5Dr/4IgbbklTQ6YmCd4pVVJM/Wx1X7sySBsjzgo5tvUf8RKUV5gcttT
KVLZjJglg1LD0VROuI0jnNX/kqeXRuamOAUyAJ4KNsIlCW59BJjH/pH3bQk2v0zv
jnunoHpBEvn6C4Vx0d6BuC2zSIRJSvmARkwcqsFI8JuYPe0PD0+p883N+TSTA5gW
2dhYsIMfKqOqinFax+DkYQuz0qFP9We+UYpFiXgJoiyDZQv5K/c/+c5yzJTXHp2R
4bt2Bn3AhK78wq/iu6KUv7JBJwaj+PP+Vv0Xv4514DvJdCXc3mrCfnauBwCIfuI5
/vjuj4oOYPMj4MNXoqv4W0ebzNUo4C1L+6qBCzOcOqRVWtEwesRpAmOgnT9ZmMfA
tIDTn+CgjwB+DrTOGS0kLbvOpp77NyyYubx4Owbwrv8ltj2J+b6OttLzrAt0xugQ
BT0zW2rcFBWqIY2f60912rzD/L2cVhoN250jIWRRrIF0J5J6yhiWAUUoyuxziyBj
Ry6dxbR9EdMZMhqLHzl6xTMCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 267117202857875051246406233203790821285912
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R10'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-09 15:07:56 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-07 15:07:55 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sheliajmitzva.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 668392088680244854785068746737459190097309642899686448125218096433336325033886011341435840306010097236489471102508792042253672773914961042710776062151907332331450485547424327427698350729063959264729671219014934141164958239258232391037387913836610634721343977233556744554809828491547933366322213445023451545933519481246907905670904702891075179346918330637337103619695499449664437541387114905744678152075129800672821226306925246985423260116628193364134758953706470877435592322862878614517951602607280332678776325176280787709998683970737067540053411637337924015377436686823263847749041030547888397103003544188454775605285046488226089052443085530702020175332703577440788470124294590764255491490569436251364901984520318875005201527641289837575050495276942149888778572942973899303064738049141408908292872546928414612981599552201943863492510327718464534783512648113334120276701831303126494866751551789723584547983476622773793778123907484792900371365415706759701621104495603214923061646544775323463952400848299178013866289376088402316569426801459287152746500632704005309614536395573377280490148251814332135232486847197254151167201444467976827017508848172439128259514151610757404214587129549965335669655768464235516880634748608919310396212531
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c4a9eb6eeb55d65cdeb71d92598e69b09b412925
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName bbbcc347a5e4bca9c6c3a4720c108da235e1c8e8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sheliajmitzva.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sheliajmitzva.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018ffdc1a1eb000004030046304402207d188e39c34c2a226113b5bc356ad0ae1ac116b0d3abd0ebeabee6f89dd8529502205e834281732a77d66f422de05a45e011f9bcfb2ab5c7042ba24096ee554fbd5d007500dfe156ebaa05afb59c0f86718da8c0324eae56d96ea7f5a56a01d1c13bbe525c0000018ffdc1a2c60000040300463044022051e95ee53dcb38845d58e74fa6b0b775055e0642aae46e9dc50b9180a735a96c02205b2ae305f3c474f0763c8bc902a3d896cd46dc23983f8a3d07d0535c0581a8b6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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