www.farmerfamily.org

Issued by R3

About this certificate

This digital certificate with serial number 04:14:a2:b1:ff:d3:39:f3:0e:50:57:3a:48:6e:f6:ae:66:db was issued on by Let's Encrypt.

With 30 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.farmerfamily.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:14:a2:b1:ff:d3:39:f3:0e:50:57:3a:48:6e:f6:ae:66:db
Serial Number (int): 355471050226070398595478628864918486410971
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: bd:a5:6c:8b:12:32:0d:ae:e1:2c:df:55:1f:ed:9b:af:b8:d7:13:73
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 25:3d:2e:4e:f2:d8:b1:96:9a:94:22:ff:51:86:6a:85:ef:87:30:5f
Fingerprint (sha256): 0c:1a:ff:40:ec:c4:39:d3:62:70:af:e2:fc:92:a5:4e:1a:6a:0c:75:11:33:79:ea:fc:2c:4b:48:97:e0:bc:5d

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.farmerfamily.org

30

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.farmerfamily.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

advantagewatch.com
bullbrewski.com
cbdaphrodisiac.com
currencytraders.ca
deltasagittarii.com
drmonaghosh.com
farmerfamily.org
genius.training
kellyhillranch.com
maglyte.com
multimediahealth.com
pennsylvaniadai.com
roadprofiling.com
rosenfeld-consulting.com
shamanichomeschooling.com
www.advantagewatch.com
www.bullbrewski.com
www.cbdaphrodisiac.com
www.currencytraders.ca
www.deltasagittarii.com
www.drmonaghosh.com
www.farmerfamily.org
www.genius.training
www.kellyhillranch.com
www.maglyte.com
www.multimediahealth.com
www.pennsylvaniadai.com
www.roadprofiling.com
www.rosenfeld-consulting.com
www.shamanichomeschooling.com

Other certificates including the domain name farmerfamily.org

(limited to 100 certificates)
farmerfamily.org
www.farmerfamily.org
www.carly.ca
farmerfamily.org

Certificate

The complete raw certificate details for www.farmerfamily.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxx3H4/Top4nunfHsMwNc
H8HuE3cn397sd+r9C7qApCZgGwRk2aKXUim5s76mx5GN2bMYblI6RV73C3s+rDhI
2pQfAGg01JJFKzuZ2alfYjEyUCiVkk0SnoxSRaHYtVx78WdrILBG41fXeKy/U1RX
UcYRrqLrxESiQmk5/JyPsT2OjWzYxU3rRnj/IDi6+XcyYzTglZK1H5YLNsgJwCIR
gkB90oEFK9+fZaTy0e4qhDi5iv9Logl2eNbP1MayxcPPeMojs8NSqiFJSqU7ipMP
uglRcudeX2S9dhboUiLEXIw0OeyFwh9pw70VM05nXdQ535VGSAPcGois86hvhQnX
YQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 355471050226070398595478628864918486410971
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-08 06:42:46 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-06 06:42:45 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.farmerfamily.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25136108158954624021059678012408429545249763102763743149126980557297020800049633276819222706747247035644636273586674713257631019445058857375640935048991392621344263700659465783485390285813960479684652762123115079806002526007089987007283856159313854429969036695042241294902322454840762588015939510219679548009365826812681039328121597789487924332194639237387066799758052326085890465550225358893903577873164062207132010270113096687780152311370203583451806774797330600460741676680960779564031208757759599599956206823796577992309449755676125085468817702357415847737794212955410358988424080335520659639391822098855677777761
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bda56c8b12320daee12cdf551fed9bafb8d71373
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (660 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advantagewatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bullbrewski.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbdaphrodisiac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'currencytraders.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deltasagittarii.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drmonaghosh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'farmerfamily.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'genius.training'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kellyhillranch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maglyte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'multimediahealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pennsylvaniadai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roadprofiling.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rosenfeld-consulting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shamanichomeschooling.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.advantagewatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bullbrewski.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbdaphrodisiac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.currencytraders.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.deltasagittarii.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.drmonaghosh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.farmerfamily.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.genius.training'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kellyhillranch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maglyte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.multimediahealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pennsylvaniadai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roadprofiling.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rosenfeld-consulting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shamanichomeschooling.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018f5727a5c50000040300473045022100fa58bb5b578d62fa56a6793df90fd0eb618f3b5c10cdc208bcd57476d29e8dc802204638c324e1536f6c51d520f06fbe99adf4c94bb128e9c19f0197b2f7a0df793a0075003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018f5727a5de000004030046304402204a1f93018c7bd47dd6985ee2a4f423cab48749adf9ba627ccb3e151b9485c12b022013d42f0ab9a35bd9b05448456d6e7b97c9342dbf87198105f57f1c1e77a26371
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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