gopphotographer.org

Issued by R3

About this certificate

This digital certificate with serial number 04:75:e7:06:4a:54:ed:52:1e:6f:16:a1:4b:a3:3d:f1:3b:d7 was issued on by Let's Encrypt.

With 17 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=gopphotographer.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:75:e7:06:4a:54:ed:52:1e:6f:16:a1:4b:a3:3d:f1:3b:d7
Serial Number (int): 388569264985225177131703874350360342641623
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: f9:94:28:c6:d0:e7:61:dc:f9:96:42:63:86:54:13:f6:d5:03:3a:4c
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): da:51:11:0e:00:db:cf:b4:b5:83:07:01:11:d5:68:74:8a:e5:c4:73
Fingerprint (sha256): 0a:8e:e9:a9:5c:7b:1c:a1:56:35:c1:63:f2:32:aa:4d:36:76:a3:a4:87:0e:cb:ff:c4:d0:de:30:de:96:cb:2e

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate gopphotographer.org

17

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gopphotographer.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aspectium.email
bigsoundstage.com
bufote9.com
chillermagazine.com
fiscalzone.com
gaynitesout.com
gopphotographer.org
imageonline.com
kimblecounty.com
minthillproperties.com
ooomessage.com
realestatetechtips.com
rxsugarcerealprogoldencrunch.com
seagency.com
stoneoakmedical.com
texasnetworksystems.com
worstchristmaslights.com

Other certificates including the domain name gopphotographer.org

(limited to 100 certificates)
5272653.ca
gopphotographer.org
rapidbus.co.za
bombersfastpitch.org
strandhotel.co.za
oilseedcrushing.com.imnaha.com.mn.cosfacts.org.49ers.love
gopphotographer.org
norwoodwaterworks.ca
gopphotographer.org
vaxaction.org
rxsugarlicensed.com.erate.consulting
furcel.club
mngophoustonco.org
gopphotographer.org

Certificate

The complete raw certificate details for gopphotographer.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA24eyQynnxTOdTdJztvOr
k6z/sGT0pNECSy8Mll3RD7T2o945kpkn1eu4ATu3VRjKN31BTqtQx/7ln63TCwc9
i/t7qfW5qK5hW0+u4Caz+wdcPkWNuvL93irCQwBF4bf7Ma5WrY8j5TqcjChhjzPV
t/diO9eOcMpEc+DNX+6WApKUdsCqFqXBrE/EA2WC/M0r1I2ys8jiyJ5g2/mwqZCd
5gN3Ke8Q3UK6xOtaOLABVh8YAxyg5emOaLvUZbPtZ+yW2cUCSihY3dWeA2TxLXOW
BscB8QCzgtOpciF/+OBLTonqxHOVHJ95uijTVONiMYVJrPK+g5r8T2rOOIT89WyF
DQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 388569264985225177131703874350360342641623
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-14 15:43:52 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-13 15:43:51 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gopphotographer.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27713103145439797302650041172872134671548926627289474644922002320586146663037476915928932184463131822712743747734280244758161673592481872478472537992936656399713424189819156999550402951260968477769461821825685436607799283551241495650645649728154899735316516399152885752589799066071524184505857122695825855656597064052844924552688513027374583846901314939528253042468315814780637982875119229390011155345803805550460606072246815197565784539499113208673351655893123523709018732782283814768015309573740889932178830049722345150439710317888181905965325044921279019075248966717640580582041872408230907396555424009981174514957
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f99428c6d0e761dcf9964263865413f6d5033a4c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (347 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aspectium.email'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bigsoundstage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bufote9.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chillermagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fiscalzone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gaynitesout.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gopphotographer.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imageonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kimblecounty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'minthillproperties.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ooomessage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'realestatetechtips.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rxsugarcerealprogoldencrunch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seagency.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stoneoakmedical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'texasnetworksystems.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'worstchristmaslights.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018edd7e69290000040300473045022100de6c9006c8fcac663fb341de344b1cfd58321e27ccf474bdd9d395e76728846102207a1295852b78e17ecb005a0874fd74af839869346a4a2307d4d161d5ade490080077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018edd7e6927000004030048304602210093eaf4f60a31c581e3d012d30a0608b3b19c160e5c01fdce7fcba5cfab9caf6d022100f836d68182abe683451db41db426b75aa64c3d735a2b0c4a063f356d7a4fdcf4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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