www.freedomprojectmedia.org

Issued by R3

About this certificate

This digital certificate with serial number 03:68:a3:79:86:dd:c1:2e:d9:d5:64:e6:dd:42:21:75:7e:aa was issued on by Let's Encrypt.

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.freedomprojectmedia.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:68:a3:79:86:dd:c1:2e:d9:d5:64:e6:dd:42:21:75:7e:aa
Serial Number (int): 296943519121703262192638461722031897804458
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 83:d7:42:32:3c:10:4d:a8:ae:5c:b4:d9:c5:b2:a4:21:a6:a9:07:c2
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): dd:89:b2:84:ba:b3:b7:b6:e3:83:02:8b:2e:2d:5e:40:d9:9b:88:01
Fingerprint (sha256): 0f:eb:41:c7:d9:37:3f:9f:bb:06:81:55:06:fd:0e:83:5a:df:b8:ec:fb:09:e1:8e:93:96:e9:43:f3:96:e4:04

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.freedomprojectmedia.org

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.freedomprojectmedia.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aegisproductions.com.p3trainingandconsulting.com.montezumacounty.com
fargoadvertisingagency.com.marketingauthorisation.com
mjnazarene.org
priyadarshni.in
therestorationmaster.com.bio-lab.com
webtrafficstatistics.com
www.faithfullyeducatingamerica.com
www.freedomprojectmedia.org

Other certificates including the domain name freedomprojectmedia.org

(limited to 100 certificates)
www.freedomprojectmedia.org
www.freedomprojectmedia.org
www.freedomprojectmedia.org
canibuild.world
freedomprojectmedia.org
freedomprojectmedia.org
practicaltactical.ca
freedomprojectmedia.org
overcomersprogram.ca
resumestudy.com.freedomprojectmedia.org
freedomprojectmedia.org
vindl.ie
www.freedomprojectmedia.org
sculpit.life
canibuild.asia
www.freedomprojectmedia.org
freedomprojectmedia.org
freedomprojectmedia.org
tulp.care
freedomprojectmedia.org
dew.sc
freedomprojectmedia.org

Certificate

The complete raw certificate details for www.freedomprojectmedia.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9m+LbWTVeW6PogI6ggB
DbDAonTpdU4udYoHGUuzCMBLiAw48O+9l50C7RV8u2AilE07t1C37q5oeyCfSaax
qhVVvD8VuvAs3az/oqEj3ks35znjbLDm9dcKQEdOPpwtwpFBDUvs5FMKa1lIpudM
vp9PmmuPa9EcNlbk0RRjBC9lk592xpzCL7JfXE1T0ucRheQBeF8SguLlY1OLM4hR
DaqyqW5pjBGBIN4Dj8tRoh+3d7Bkxkqt0Em9XiypkzlYNO0A+ps/tqxnujIwPlvE
ThxfXACSTl41+XaLRg0MeOIOBw+hA47GDp4Ls2d13ED+CVrsSub75ZjPdKdCvKwz
hQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 296943519121703262192638461722031897804458
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-11 20:40:49 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-10 20:40:48 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.freedomprojectmedia.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20684216727892601178937539660595820555482688369821213338216695438299810653864017382184492481940742970181824573381079905585653100590591234679575203420400280531524208196367872786057076337841293844049702360583157787136725423124121925044430936961036095643560732829416356747710590677520359264394987274547150594699726527995593741822057279904673706581853443157433746164830298508197957627691187302036761743102125818896086060231017014295699837186797496964305858698498350763269472970517778242399259386694801137951480596720632388613758082804215310517550882396910006870433454186148158897392834257766596323027214360263242204066693
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							83d742323c104da8ae5cb4d9c5b2a421a6a907c2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (291 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aegisproductions.com.p3trainingandconsulting.com.montezumacounty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fargoadvertisingagency.com.marketingauthorisation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mjnazarene.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'priyadarshni.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'therestorationmaster.com.bio-lab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webtrafficstatistics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.faithfullyeducatingamerica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.freedomprojectmedia.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c5ad35a6000000403004730450221009790422400f9c28c1914b7ac0dcb451c64a13e5a1feaf91156902070efc3a25f022047416c16d3c3d139f095bd747f908faafdacfaa52cf276ca99739a1f943b0b12007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018c5ad35a6a00000403004730450220504e386f0064d59d26e40acb105f55b6169e10b6e5693ca5fcc8b9656021d1dc0221009aa1804b8a75dd04f1a0bb2c89ac4ab0391221f2212ce8eb0c082531d7ff08e1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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