globalquakemodel.org

Issued by R3

About this certificate

This digital certificate with serial number 03:21:b9:2c:fa:09:91:33:38:15:3c:ef:7e:07:2a:f7:6d:bd was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=globalquakemodel.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:21:b9:2c:fa:09:91:33:38:15:3c:ef:7e:07:2a:f7:6d:bd
Serial Number (int): 272812316615314085825097096140023399935421
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 09:32:2a:62:e1:c4:d6:e2:91:72:d3:05:b4:91:0d:53:33:d2:d1:70
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): bc:67:db:c1:b8:67:bf:6b:0f:8f:a1:c4:23:1a:6c:ba:dc:c4:07:7a
Fingerprint (sha256): 21:88:7f:b2:e4:5d:87:b4:ec:87:40:e8:97:f0:f9:83:04:b5:dc:b7:7f:5b:f8:56:c4:92:58:da:88:07:a9:80

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate globalquakemodel.org

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for globalquakemodel.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

globalquakemodel.org
www.globalquakemodel.org

Other certificates including the domain name globalquakemodel.org

(limited to 100 certificates)
ftp.openquake.org
ftp.openquake.org
globalquakemodel.org
www.globalquakemodel.org
www.nexus.globalquakemodel.org
old.globalquakemodel.org
ftp.openquake.org
www.gem.foundation
cloud-storage.globalquakemodel.org
www.nexus.globalquakemodel.org
storage-scw1.globalquakemodel.org
cloud-storage.globalquakemodel.org
globalquakemodel.org
ftp.openquake.org
old.globalquakemodel.org
globalquakemodel.org
nexus.globalquakemodel.org
ftp.openquake.org
globalquakemodel.org
old.globalquakemodel.org
www.nexus.globalquakemodel.org
www.nexus.globalquakemodel.org
globalquakemodel.org
old.globalquakemodel.org
old.globalquakemodel.org
cloud-storage.globalquakemodel.org
cloud-storage.globalquakemodel.org
ftp.openquake.org
old.globalquakemodel.org
old.globalquakemodel.org
old.globalquakemodel.org
globalquakemodel.org
www.nexus.globalquakemodel.org
www.nexus.globalquakemodel.org
ftp.openquake.org
globalquakemodel.org
old.globalquakemodel.org
globalquakemodel.org
ftp.openquake.org
old.globalquakemodel.org
globalquakemodel.org
globalquakemodel.org
storage-scw1.globalquakemodel.org
globalquakemodel.org
www.nexus.globalquakemodel.org
www.nexus.globalquakemodel.org
ftp.openquake.org
globalquakemodel.org
ftp.openquake.org
ftp.openquake.org
ftp.openquake.org
ftp.openquake.org
www.nexus.globalquakemodel.org
www.nexus.globalquakemodel.org
ftp.openquake.org
ftp.openquake.org
old.globalquakemodel.org
storage-scw1.globalquakemodel.org
nexus.globalquakemodel.org
www.nexus.globalquakemodel.org
old.globalquakemodel.org
globalquakemodel.org
www.globalquakemodel.org
globalquakemodel.org
www.nexus.globalquakemodel.org
globalquakemodel.org
globalquakemodel.org
globalquakemodel.org
globalquakemodel.org
storage-scw1.globalquakemodel.org
storage-scw1.globalquakemodel.org
storage-scw1.globalquakemodel.org
globalquakemodel.org
ftp.openquake.org
storage-scw1.globalquakemodel.org
storage-scw1.globalquakemodel.org
globalquakemodel.org
globalquakemodel.org
cloud-storage.globalquakemodel.org
ftp.openquake.org
old.globalquakemodel.org
www.nexus.globalquakemodel.org
cloud-storage.globalquakemodel.org
www.globalquakemodel.org
mail.globalquakemodel.org
old.globalquakemodel.org
ftp.openquake.org
old.globalquakemodel.org
globalquakemodel.org
www.globalquakemodel.org
old.globalquakemodel.org
ftp.openquake.org
www.globalquakemodel.org
ftp.openquake.org
globalquakemodel.org
www.nexus.globalquakemodel.org
globalquakemodel.org
www.globalquakemodel.org
globalquakemodel.org
globalquakemodel.org

Certificate

The complete raw certificate details for globalquakemodel.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohIzLz0jz2XJg9bMO0yr
eX0Gph6T1xctslHAYG3PIuRao9+4FaLPrs9xQpiHgB1d7tpzez+79PM2HAR6yRku
8JaKFIQjRtEwxuVP4hOxmhF/2mzM3TAxyMsaPCFbtaHN3ig2Nlsz8h1fKDCbf4Tu
TDyl5s7XYWEq86e1TcoJIbvK4RI7br2vaexzjwRU0dWpC6zod+UbckBk9oj41111
XQG+PuntLyqzGpRDC54c3QmAn9YHekohn7Hk1z9qGrpuVFtz2baetoZnEBY36NNB
uIxRlZLuQ9mY1Z/I2scC+qaLM4tsCcsHj9EpMHNIKmLxvy8hR9UEVY1mtTKjaxla
UwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 272812316615314085825097096140023399935421
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-10 05:25:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-08 05:25:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'globalquakemodel.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20459580129189774741179208989898163421414257852628837961948411848423746695662742298093221555785944549045617923647825895217589674054555735323760560569117749226070037740441855140132156695693880287594920599084687906783091616427229525506225801257230163348031243286361158659672137542454264656409245799920928741939954110723838539792765712977379894889837132557729639687231618906759285597654236223618839590996664106570697024627171545532530224903417897856557260813760686870875067975057509482383072747430562554674041792835372041010441817941600366699576067093889998778274626780420586168472143004467058509726219823860890621008467
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							09322a62e1c4d6e29172d305b4910d5333d2d170
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globalquakemodel.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.globalquakemodel.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca0000018f612e0a7400000403004630440220426b6017c4e4337009015ccb0848a825da58b0b77dcbd9ee36ff06d723361c4602201c1563b4782dacae0e59dced85076dd3a3d5f898f6aca24542538a272187577900760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018f612e0a4b000004030047304502206f5829609f9ea7544c96e5d5b8501b37fe0191e4e8138a82644a0a6867c5a74002210090cdc5e40d0d41a0df3074c2f00857d168be5d2b68743b7e74f0810658ddf433
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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