abrahamsenfinancial.com

Issued by R11

About this certificate

This digital certificate with serial number 04:29:c3:3b:e0:8a:2d:fe:43:ca:3b:27:df:9a:81:c0:59:44 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=abrahamsenfinancial.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:29:c3:3b:e0:8a:2d:fe:43:ca:3b:27:df:9a:81:c0:59:44
Serial Number (int): 362660231129699647596212138063450163140932
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 39:23:0e:0d:ce:96:db:e1:78:5e:08:00:e1:24:52:4d:73:55:23:82
AuthorityKeyId: c5:cf:46:a4:ea:f4:c3:c0:7a:6c:95:c4:2d:b0:5e:92:2f:26:e3:b9

Fingerprint (sha1): b3:a7:85:17:28:7d:93:0b:3b:89:40:a4:c8:47:ea:02:16:42:c1:e5
Fingerprint (sha256): 19:57:50:81:fb:6a:73:b5:dc:92:90:e5:f8:f4:4d:fb:9c:c7:d9:29:29:e3:90:fe:82:c1:44:0b:34:40:c4:e8

Issuing Certificate URL: http://r11.i.lencr.org/

Revocation information

OCSP Server: http://r11.o.lencr.org

Check the revocation status for certificate abrahamsenfinancial.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for abrahamsenfinancial.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

abrahamsenfinancial.com
www.abrahamsenfinancial.com

Other certificates including the domain name abrahamsenfinancial.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for abrahamsenfinancial.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 362660231129699647596212138063450163140932
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R11'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-11 16:03:01 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-09 16:03:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'abrahamsenfinancial.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 958773901087374633363172686623725590070718478175199714379442924001646552844661727341912033583645719526489138106338101912648771110266046254135761932006781772968530794012410841356076528492416509219923681990249836444853626978829381502931609035612805461528178615979111720048796819975192860983257924133468221596738583660230856471908073375037369812473268099668993438760561568456332856048945677055227517239983887263086448415470973374797840996291512553583030278497976061790049791879984110155998769243476431407248602823968958062217469413991074465989068765783978063398578385412315042642196041518030840264962465483186877427599173585019132251164031493731811391735335439110326922414277490574249478251327602225317944293006575162099232975440364397279517660154928648801264972804527623667792049003308833093276249691230940869604032849621384680490433502966486729031825451408914561783156601202578534247391318055862396386600935774077724367572327931663557452223544784235069663363590497477846805641566381483378893205400628475956633941393819123397915214889933979875426248673498189641502181174671830019168609945388000070039070296082260317309597307385725755281861500175977559866149427762151166969507003024932462321903634804494123112088980041714082632475118433
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							39230e0dce96dbe1785e0800e124524d73552382
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c5cf46a4eaf4c3c07a6c95c42db05e922f26e3b9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abrahamsenfinancial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.abrahamsenfinancial.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d88473000001900840c82100000403004730450220763f3f85029b7059a683a39e41274c1ecdd6530cebb287cf9008f30e3cc95109022100aefd161ed83d41ef7c04f564b00038cc24a234aad0936b1557851641b8f17c0c007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b000001900840c8220000040300473045022100f7bb270bc5e2268f72a429d7975464890d1b9aab671f96f68277cc07a09416f1022049a08ef56e4bf7a9d83844093033f1032e5085d1622a1e6134aa2ead0c1a70bf
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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