diadecolegiocristiana.org

Issued by R3

About this certificate

This digital certificate with serial number 03:7e:bc:b3:fc:11:5b:0e:e8:0b:65:f1:7f:1f:22:6d:3b:95 was issued on by Let's Encrypt.

With 14 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=diadecolegiocristiana.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:7e:bc:b3:fc:11:5b:0e:e8:0b:65:f1:7f:1f:22:6d:3b:95
Serial Number (int): 304463265424206508294126263312843799346069
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 3a:b5:e5:a0:93:e2:95:d5:64:c3:5b:20:4b:9c:b4:00:f9:74:6d:21
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 88:c4:81:30:e7:4c:10:5b:7f:3d:5d:f1:73:76:73:65:a8:a5:c7:ce
Fingerprint (sha256): 0d:70:0b:e0:06:f2:00:77:fb:78:bb:20:e7:84:3e:9b:db:6c:26:88:06:f1:f4:55:81:ef:2e:91:3a:94:14:58

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate diadecolegiocristiana.org

14

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for diadecolegiocristiana.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

adflegal.sex.citi-music.com
austincommercialappraiser.com
bestmiamimovers.com
diadecolegiocristiana.org
firstbornsaints.com.coppercookwareset.com
floatationpods.com
loangpt.com
modmed.org
moneyforvip.com
queermates.com
sanantonioeating.com.fredgoad.com
thesauros.org
thevillageswindowwashers.com.infosnores.com
vhcusa.com

Other certificates including the domain name diadecolegiocristiana.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for diadecolegiocristiana.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGOTCCBSGgAwIBAgISA368s/wRWw7oC2Xxfx8ibTuVMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzExMTcwMDQ2MjFaFw0yNDAyMTUwMDQ2MjBaMCQxIjAgBgNVBAMT
GWRpYWRlY29sZWdpb2NyaXN0aWFuYS5vcmcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDi6FPhtAO6EcHHnXQeSO6vcw2O7MLYvHVSGt1oWzzhDXI3ja8C
Q92FcxTHEsPcn0Yv1+xkfCS1u1mn1MFftlxazWfDIHrCPXV4pk/cle9joUznbbvT
62rX18fknsug3VpIiDCWjJCycH4xAuIh4knqHq+DL08PBRRVaqIv5EW9hsvwGrgh
QsKs8w2PjAFcp0UkwRFj4f6hSZuWgXszzTwsgyEscNIHg51l/x07hqZVCQbVR2Pp
U1x0l6ohMwmag263wgE40ZgtmKM+wiun8nCLnCLxIePTPBXMsLmOpvb+q19ZRvpy
ZrrLd/NyuRHRlMNNxpm5v19pxOUVNncqdWIXAgMBAAGjggNVMIIDUTAOBgNVHQ8B
Af8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB
/wQCMAAwHQYDVR0OBBYEFDq15aCT4pXVZMNbIEuctAD5dG0hMB8GA1UdIwQYMBaA
FBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcw
AYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMu
aS5sZW5jci5vcmcvMIIBXQYDVR0RBIIBVDCCAVCCG2FkZmxlZ2FsLnNleC5jaXRp
LW11c2ljLmNvbYIdYXVzdGluY29tbWVyY2lhbGFwcHJhaXNlci5jb22CE2Jlc3Rt
aWFtaW1vdmVycy5jb22CGWRpYWRlY29sZWdpb2NyaXN0aWFuYS5vcmeCKWZpcnN0
Ym9ybnNhaW50cy5jb20uY29wcGVyY29va3dhcmVzZXQuY29tghJmbG9hdGF0aW9u
cG9kcy5jb22CC2xvYW5ncHQuY29tggptb2RtZWQub3Jngg9tb25leWZvcnZpcC5j
b22CDnF1ZWVybWF0ZXMuY29tgiFzYW5hbnRvbmlvZWF0aW5nLmNvbS5mcmVkZ29h
ZC5jb22CDXRoZXNhdXJvcy5vcmeCK3RoZXZpbGxhZ2Vzd2luZG93d2FzaGVycy5j
b20uaW5mb3Nub3Jlcy5jb22CCnZoY3VzYS5jb20wEwYDVR0gBAwwCjAIBgZngQwB
AgEwggEDBgorBgEEAdZ5AgQCBIH0BIHxAO8AdQBIsONr2qZHNA/lagL6nTDrHFIB
y1bdLIHZu7+rOdiEcwAAAYva9SmLAAAEAwBGMEQCIHP4poVH07P/w+JWTN9PjtQY
QaNQi+EUwAeOc5o4CM7BAiB8wdmveo+c5KkUuf1gfGNAhzgun3b+Hllsp5KM8aEX
6gB2ADtTd3U+LbmAToswWwb+QDtn2E/D9Me9AA0tcm/h+tQXAAABi9r1Kd8AAAQD
AEcwRQIhAPiAr96opcrhDENJ49wkLsKC30FXvw6PGhZ4Xhzo/YbOAiAwP65vp8f1
MOC303kZnznzOHK2DhrGoeKcQgWFxjeNgjANBgkqhkiG9w0BAQsFAAOCAQEAMQ7U
4NJa8JjwAWZ4RAzSFJuyHzxifzl10YlLytYajD2UtGe79i0JgAOKVAN+OP0aQYb9
OTccDVLwUinH04GzgLupDHDoGhkzij2kTg85cg9S/pqurdoRX9AX6hgb+Xbw+Pwr
Rl85pPyRpVnhz+C5RNCCC3jsr5GX+xDNmriHz3+R8/soxgUD3VCUX1BDOciU9vEm
zEF6tk0GAsWHN7ko/5DLtenBR6VTc7zIGnUa4DKEX5CHgivczs2/PvqGBQZeKdWu
mA+T6tC6pyAVXEOE4ELlNrcORx90Sx6rqLgSRJupPEq0n1BR8+wzsGZpBdC5RBUH
Or3Rek85e/lKTOSjnQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4uhT4bQDuhHBx510Hkju
r3MNjuzC2Lx1UhrdaFs84Q1yN42vAkPdhXMUxxLD3J9GL9fsZHwktbtZp9TBX7Zc
Ws1nwyB6wj11eKZP3JXvY6FM52270+tq19fH5J7LoN1aSIgwloyQsnB+MQLiIeJJ
6h6vgy9PDwUUVWqiL+RFvYbL8Bq4IULCrPMNj4wBXKdFJMERY+H+oUmbloF7M808
LIMhLHDSB4OdZf8dO4amVQkG1Udj6VNcdJeqITMJmoNut8IBONGYLZijPsIrp/Jw
i5wi8SHj0zwVzLC5jqb2/qtfWUb6cma6y3fzcrkR0ZTDTcaZub9facTlFTZ3KnVi
FwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 304463265424206508294126263312843799346069
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-17 00:46:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-15 00:46:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'diadecolegiocristiana.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28644421962707719440392939953754390598617523094658172248421861574881836197760501018222144485693438359302735581188237994553465574278331812075149296192702067007851877233790660091503713518301202882813404942149365897740217877492775665587212430877636015134543353425784870528159845103843553982695533496499523351667744376225546080276627518494108199109548696806290485022933364837218828120645073932451320068109348581356189557481727102435240761594590892240999625966483540362594618262243280194771136427403847216774324623010096205800554372538639631139360868021226987168957308740213612154483057385190476345990511436885680775848471
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3ab5e5a093e295d564c35b204b9cb400f9746d21
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (340 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adflegal.sex.citi-music.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'austincommercialappraiser.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestmiamimovers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diadecolegiocristiana.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firstbornsaints.com.coppercookwareset.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'floatationpods.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loangpt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'modmed.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moneyforvip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'queermates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanantonioeating.com.fredgoad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thesauros.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thevillageswindowwashers.com.infosnores.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vhcusa.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018bdaf5298b0000040300463044022073f8a68547d3b3ffc3e2564cdf4f8ed41841a3508be114c0078e739a3808cec102207cc1d9af7a8f9ce4a914b9fd607c634087382e9f76fe1e596ca7928cf1a117ea0076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018bdaf529df0000040300473045022100f880afdea8a5cae10c4349e3dc242ec282df4157bf0e8f1a16785e1ce8fd86ce0220303fae6fa7c7f530e0b7d379199f39f33872b60e1ac6a1e29c420585c6378d82
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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