sanbortolo.org

Issued by R3

About this certificate

This digital certificate with serial number 04:e8:1a:3d:ea:05:c9:9b:4c:0d:d6:a5:f9:3b:c8:15:31:e4 was issued on by Let's Encrypt.

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=sanbortolo.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:e8:1a:3d:ea:05:c9:9b:4c:0d:d6:a5:f9:3b:c8:15:31:e4
Serial Number (int): 427429534257239870843872805209686215569892
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: ce:c3:e9:26:8b:e9:e0:eb:45:1b:79:86:01:6d:ae:76:3e:bc:8b:4a
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): f3:92:b3:0c:1a:c2:49:5b:b7:13:d5:dd:96:e9:4b:9c:42:e7:46:d8
Fingerprint (sha256): 15:04:2e:12:bd:94:41:3b:da:e2:84:f8:e7:62:65:21:da:61:96:76:2a:a4:2a:33:02:2e:c9:1c:bd:5c:64:01

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate sanbortolo.org

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sanbortolo.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

carbcbd.com
china.istlm.com.aspectium.tel
digitalstorebuilder.com
goodbyetogoogle.com
healthyhomeguideline.com.chillertrader.com
myprivacyguide.com
sanbortolo.org
www.organicdomains.com

Other certificates including the domain name sanbortolo.org

(limited to 100 certificates)
sanbortolo.org
rasulid.org
sanbortolo.org
variant.vc
training.ccbt.bible
info.nangyeuthuong.org
showassociation.org
stainlessbodyjewellery.com.guidetoprivateschools.com.z7.vc
sanbortolo.org
xsa.co.za
sanbortolo.org
sanbortolo.org
relevanceventures.vc
sanbortolo.org

Certificate

The complete raw certificate details for sanbortolo.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArkPkNJs66ZbH3cjd1Xn0
QyIN8vCRw9J6XsFsnfpeI6N54G+u5g7MH5HjU8xp4UVSSN9DjxiFGM8yaEgHpK7G
8o7ZTcb3TlBTWtOXJXD1FNU95jJHOrRl2XZRqGxsejRTjFcqttl5isxQ6rG+sPyn
qVRTjT1ZbnJim58SwvymqgU2+uI/h5pM2bK2/p9ZlYae00RpVInXyt/SQtZx7lW5
E1bN7GS7+Vq7huGrhnSJoOqRBh05PpEKleTUAcTsEqTffT7+C4vCVdjbiFvJNeSw
hjH71jy6mdgoivhymlzoYP71aJRi8xZqvwI+hTzgQGqHlgVz7NjVZ2St4NQqrAWX
6QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 427429534257239870843872805209686215569892
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-28 16:14:48 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-27 16:14:47 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sanbortolo.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21998943574858922621906094786405591299020787068880904984796877434685198384706754577556650028547716257606767136619492568879023790259215914620547624041092715549141273012126599718864742930191261997596098849779701236032612197085705323439321231984750168868226520560099782348399118466787422611289280280915400147185821070273231835869623151413556422945895992521115370638323832877213004594420443067884701427401870436151278334867348670588018270959596692586228891532624432565667419177551543754542698806176247773139463014072127266158848331182062919671817016093898704961468260021337264014302196364070582914199624320154751425943529
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cec3e9268be9e0eb451b7986016dae763ebc8b4a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (197 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carbcbd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'china.istlm.com.aspectium.tel'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalstorebuilder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goodbyetogoogle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthyhomeguideline.com.chillertrader.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myprivacyguide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanbortolo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.organicdomains.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018cb16bebb3000004030046304402207a8c77f676da9ce3dd98b8097f959de02e48aca577c0a3e19f80084979234c3e022039006ea442659daa4e1632773c8e5281c1015e3cc07b477021481bcbf48d242b007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018cb16bedaf0000040300483046022100cb67cabcd028434cd97ab120c4a0a66801e45988f19fea5d803e2b1adec9a670022100d715cba2e59e11df64fae87669bee82a8788b1519f4c1fcfb640b2accf96337b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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