podcaststandard.org
Issued by R3
About this certificate
This digital certificate with serial number 04:56:6f:1f:cc:78:43:53:c6:b7:80:62:78:fa:d3:61:8c:97 was issued on by Let's Encrypt.
With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=podcaststandard.org
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 04:56:6f:1f:cc:78:43:53:c6:b7:80:62:78:fa:d3:61:8c:97Serial Number (int): 377861136698116210107461735271912492338327
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 61:5e:cf:18:f1:69:68:96:c2:6d:c5:dc:ba:31:d1:6b:20:aa:06:a0
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): eb:76:1e:df:0c:51:ac:60:cd:40:8e:f9:8e:98:9c:3a:f4:86:f7:05
Fingerprint (sha256): 0d:e8:54:b7:02:2c:0f:63:3d:0e:cf:60:fd:5b:86:4b:56:ec:fc:77:3a:2d:c3:f7:73:0e:95:b8:04:63:47:76
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate podcaststandard.org
7
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for podcaststandard.org
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
belsheim.com
bloodsugarrx.com
goodingcounty.com
podcaststandard.org
texnetsys.net
thebestprivateschool.com
windowcleanersmearme.com
bloodsugarrx.com
goodingcounty.com
podcaststandard.org
texnetsys.net
thebestprivateschool.com
windowcleanersmearme.com
Other certificates including the domain name podcaststandard.org
(limited to 100 certificates)
Certificate
The complete raw certificate details for podcaststandard.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFajCCBFKgAwIBAgISBFZvH8x4Q1PGt4BiePrTYYyXMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDA0MTUyMTQwMTZaFw0yNDA3MTQyMTQwMTVaMB4xHDAaBgNVBAMT E3BvZGNhc3RzdGFuZGFyZC5vcmcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDXaFr97pe0gRMxBs5x4OTW/9V1qGGvSurHSEU51c0kxx1Ys2kXYL4mlsP3 MKa3a1hbM0q4jYpsVjGeeU9zck8InicLQi3WPlnWh3RoOpWfuDxta6yiS/eaL5N5 UakNmyC+4Jk/Kuq2LfFr87Sg4Tu5u50+qPXcEHtZbacqq2b2B2bsLID5PZy3GDaU YzwEBi8VGl8trUeVQ+WR2BHe9S8N9ZLnElB1XtNhkwiAioQAZyR1VYnzkYn+rfur XNp5wiW6NjMLMRhx7tUlUfV5Y6pV8d4G6pvl/h71Mp/RcVkKxq5uCA8qtSx6TLne FMRdpCi4qSLH54T0n2MvNWvs6ix1AgMBAAGjggKMMIICiDAOBgNVHQ8BAf8EBAMC BaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAw HQYDVR0OBBYEFGFezxjxaWiWwm3F3Lox0WsgqgagMB8GA1UdIwQYMBaAFBQusxe3 WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0 cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5j ci5vcmcvMIGWBgNVHREEgY4wgYuCDGJlbHNoZWltLmNvbYIQYmxvb2RzdWdhcnJ4 LmNvbYIRZ29vZGluZ2NvdW50eS5jb22CE3BvZGNhc3RzdGFuZGFyZC5vcmeCDXRl eG5ldHN5cy5uZXSCGHRoZWJlc3Rwcml2YXRlc2Nob29sLmNvbYIYd2luZG93Y2xl YW5lcnNtZWFybWUuY29tMBMGA1UdIAQMMAowCAYGZ4EMAQIBMIIBAgYKKwYBBAHW eQIEAgSB8wSB8ADuAHUASLDja9qmRzQP5WoC+p0w6xxSActW3SyB2bu/qznYhHMA AAGO4+sQ2QAABAMARjBEAiAO8NUAcxtxMmqHxQfzUF3PYWgcGkFGGhQYdWfIdDJW SwIgY7u7Kukh+xEM2ROHQYGS+8pClkphc+6oGwQdBdA3zT4AdQAZmBBxCfDWUi4w gNKeP2S7g24ozPkPUo7u385KPxa0ygAAAY7j6xDaAAAEAwBGMEQCICoa9QtL60ch cN/7DP94nuMmuzqJYuouKupELpUxkDXPAiBSB14091s55wErdFfNSqzy09NkCt5U 858yMlEGi1jYEjANBgkqhkiG9w0BAQsFAAOCAQEADAGdvNmSiW+IHGpNH2HiojA3 VaukKMFGxBhox93+nhMGZ/t92j/qE0fcWLFipp8rIK3da+r/11bf0L+l3Qf5isIe LjzpIFO0R6GQf4QgPM1oMlccFjihTk8qHEs6gBSffqz1YbaWDpj1Lde5mo9v19uK NX84gHLlxcwP+pdAejc282fmD47HVTa9ODUSG1mFLZz3HTOd7b+hAbERb61Y24LF qr1i4mcPjl4wM2ipjYGCc09nXNg/XM+AWBkvJ3+6nwrrPJ7UACkPXJR92372TgbC xdJFKutAvm7tGVLLJahK54Ecna1EDbv3Lh1miuNgPA354UGLXAQ8zip0X0RYWw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA12ha/e6XtIETMQbOceDk 1v/Vdahhr0rqx0hFOdXNJMcdWLNpF2C+JpbD9zCmt2tYWzNKuI2KbFYxnnlPc3JP CJ4nC0It1j5Z1od0aDqVn7g8bWusokv3mi+TeVGpDZsgvuCZPyrqti3xa/O0oOE7 ubudPqj13BB7WW2nKqtm9gdm7CyA+T2ctxg2lGM8BAYvFRpfLa1HlUPlkdgR3vUv DfWS5xJQdV7TYZMIgIqEAGckdVWJ85GJ/q37q1zaecIlujYzCzEYce7VJVH1eWOq VfHeBuqb5f4e9TKf0XFZCsaubggPKrUseky53hTEXaQouKkix+eE9J9jLzVr7Oos dQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 377861136698116210107461735271912492338327 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-15 21:40:16 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-14 21:40:15 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'podcaststandard.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27192695151708350258852159000449313769866144632013372449298137857745089551977548738011910057334109372602648097520566905850760196941280796524461139975776495859911613923089951113761487609181281098114936282671920435178077439816881686095594490923922922780988405196873256634137257412638637575376893490670078248834643148087323916016789501310324602530858704693155522613543105817550611464257567003623939526048880893839426765779899796905658146227218106197716899476986752031546165541387735289584486199590454721337135909217890822339955469153426172122899974993144868266449771879945120353778563407347186464340451575513597044468853 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 615ecf18f1696896c26dc5dcba31d16b20aa06a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (142 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'belsheim.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bloodsugarrx.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goodingcounty.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'podcaststandard.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'texnetsys.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thebestprivateschool.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'windowcleanersmearme.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes) 00ee00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018ee3eb10d9000004030046304402200ef0d500731b71326a87c507f3505dcf61681c1a41461a14187567c87432564b022063bbbb2ae921fb110cd91387418192fbca42964a6173eea81b041d05d037cd3e0075001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca0000018ee3eb10da000004030046304402202a1af50b4beb472170dffb0cff789ee326bb3a8962ea2e2aea442e95319035cf022052075e34f75b39e7012b7457cd4aacf2d3d3640ade54f39f323251068b58d812 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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