halfmarathonsearch.org

Issued by R3

About this certificate

This digital certificate with serial number 03:ce:d1:64:58:4d:bc:85:c4:c4:44:fc:8b:d3:63:ed:db:fc was issued on by Let's Encrypt.

With 18 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=halfmarathonsearch.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:ce:d1:64:58:4d:bc:85:c4:c4:44:fc:8b:d3:63:ed:db:fc
Serial Number (int): 331713355052809922846656752767161519168508
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 43:a5:aa:c9:29:b7:a8:c9:e9:ef:0d:e3:ac:c6:8b:df:cd:0e:8e:e1
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 40:70:53:af:3d:47:83:59:a8:ba:26:2e:7b:b3:92:5f:52:fe:e7:f1
Fingerprint (sha256): 07:7e:32:f3:1e:82:09:74:53:26:e0:e1:29:07:b6:73:ab:7c:3a:8b:66:63:bd:af:95:43:6f:3a:14:ff:7a:c6

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate halfmarathonsearch.org

18

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for halfmarathonsearch.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

3dmonsterporn.com
ashvita.in
bankruptcyblogs.com
beige.com
buildingstopowerplants.com
casinoarbitrage.com
condosblog.com
crystaldragons.com
denverwomen.net
exportarbitrage.com
frflanaganinstitute.net
halfmarathonsearch.org
ostomyorders.com
privatebanking4vip.com
sadapathor.com
sidelinesoul.org
sledvalue.com
spiritualhemp.com

Other certificates including the domain name halfmarathonsearch.org

(limited to 100 certificates)
halfmarathonsearch.org
halfmarathonsearch.org
honeyfavours.com.brioche.gold
books.sunset.bible
zapmedia.org.zapmedia.org
fivesolasalliance.org
halfmarathonsearch.org
artisan.ninja
halfmarathonsearch.org
arbitrage.id
halfmarathonsearch.org
www.wisdom.bible

Certificate

The complete raw certificate details for halfmarathonsearch.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHEk/TbhZJxk13J6SiGq
8OQajeaPZPhppxfQOyYs28gzrWymaXPFf83TytsNxIMYCnFyYjgZ3vyw9dE9paTQ
JnmXicq6Zdh+otjlVqgFFwQ19RvmtHTMUJ5KMNcN9CZ1VrA0QKBU0FIexXGZvHF2
0UrvbbQxF7RxUbqaRhJA5MHnyHAnPd3w2swJyNDVapDosC7TyqIiqjYZresZkGJ2
9q1lI/ws/Yhs10B7g/WN0ASK/O9jpjItmvsPXfkN+yV+3JIUy5AjhEQIJK8303Cd
cj3Zr8XveQe2w9KeSdFgzD1X2Pax+gCUwOVXrMi6GlU3zt77rZMYzQ6a4bTHLALh
rwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 331713355052809922846656752767161519168508
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-15 17:53:42 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-14 17:53:41 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'halfmarathonsearch.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21263828861154840949300988425861756422997281384493146045016594022197436601685807674529457407017888323431704222529374896766639736066716827219158302581293620290327766885376050928909288172700431526518901791773491539093241087217328682997368724968266327634700572270682903316282741690509360029022516131735026836062542355810284854491389128263505195281999071602143284862117311890115636702220254784086309352935140599273207246169747312333058587035339783534187292069402185943329209277806859800547720042898363316626480669719195130019453575667702390766645462031069854540532675667448506503070693457233797277297992555524897777050031
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							43a5aac929b7a8c9e9ef0de3acc68bdfcd0e8ee1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (349 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '3dmonsterporn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ashvita.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bankruptcyblogs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beige.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buildingstopowerplants.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'casinoarbitrage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'condosblog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crystaldragons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'denverwomen.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exportarbitrage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frflanaganinstitute.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'halfmarathonsearch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ostomyorders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'privatebanking4vip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sadapathor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sidelinesoul.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sledvalue.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spiritualhemp.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018ee31ba09500000403004730450221008441a5290538f387ee06806a414cec1ee036b7254d30c065bfffe3c4f94f7aa602202cb2dcc46b3e2f9938d90272994b79b05f8ec746f5f9d44a1e9b39ad84369cd90075001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca0000018ee31ba09d000004030046304402203066a7037db0b1f7649f36d9a5e180fbfcb5694b89170694c79349fd2f3ff8b802202b9260cd129dd42daaad90dfd6c57597d43de98e54b73c084ac2542d499afa73
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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