podcaststandard.org

Issued by R3

About this certificate

This digital certificate with serial number 04:56:6f:1f:cc:78:43:53:c6:b7:80:62:78:fa:d3:61:8c:97 was issued on by Let's Encrypt.

With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=podcaststandard.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:56:6f:1f:cc:78:43:53:c6:b7:80:62:78:fa:d3:61:8c:97
Serial Number (int): 377861136698116210107461735271912492338327
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 61:5e:cf:18:f1:69:68:96:c2:6d:c5:dc:ba:31:d1:6b:20:aa:06:a0
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): eb:76:1e:df:0c:51:ac:60:cd:40:8e:f9:8e:98:9c:3a:f4:86:f7:05
Fingerprint (sha256): 0d:e8:54:b7:02:2c:0f:63:3d:0e:cf:60:fd:5b:86:4b:56:ec:fc:77:3a:2d:c3:f7:73:0e:95:b8:04:63:47:76

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate podcaststandard.org

7

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for podcaststandard.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

belsheim.com
bloodsugarrx.com
goodingcounty.com
podcaststandard.org
texnetsys.net
thebestprivateschool.com
windowcleanersmearme.com

Other certificates including the domain name podcaststandard.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for podcaststandard.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA12ha/e6XtIETMQbOceDk
1v/Vdahhr0rqx0hFOdXNJMcdWLNpF2C+JpbD9zCmt2tYWzNKuI2KbFYxnnlPc3JP
CJ4nC0It1j5Z1od0aDqVn7g8bWusokv3mi+TeVGpDZsgvuCZPyrqti3xa/O0oOE7
ubudPqj13BB7WW2nKqtm9gdm7CyA+T2ctxg2lGM8BAYvFRpfLa1HlUPlkdgR3vUv
DfWS5xJQdV7TYZMIgIqEAGckdVWJ85GJ/q37q1zaecIlujYzCzEYce7VJVH1eWOq
VfHeBuqb5f4e9TKf0XFZCsaubggPKrUseky53hTEXaQouKkix+eE9J9jLzVr7Oos
dQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 377861136698116210107461735271912492338327
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-15 21:40:16 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-14 21:40:15 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'podcaststandard.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27192695151708350258852159000449313769866144632013372449298137857745089551977548738011910057334109372602648097520566905850760196941280796524461139975776495859911613923089951113761487609181281098114936282671920435178077439816881686095594490923922922780988405196873256634137257412638637575376893490670078248834643148087323916016789501310324602530858704693155522613543105817550611464257567003623939526048880893839426765779899796905658146227218106197716899476986752031546165541387735289584486199590454721337135909217890822339955469153426172122899974993144868266449771879945120353778563407347186464340451575513597044468853
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							615ecf18f1696896c26dc5dcba31d16b20aa06a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (142 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'belsheim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bloodsugarrx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goodingcounty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'podcaststandard.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'texnetsys.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thebestprivateschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'windowcleanersmearme.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018ee3eb10d9000004030046304402200ef0d500731b71326a87c507f3505dcf61681c1a41461a14187567c87432564b022063bbbb2ae921fb110cd91387418192fbca42964a6173eea81b041d05d037cd3e0075001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca0000018ee3eb10da000004030046304402202a1af50b4beb472170dffb0cff789ee326bb3a8962ea2e2aea442e95319035cf022052075e34f75b39e7012b7457cd4aacf2d3d3640ade54f39f323251068b58d812
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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