sasfoundation.org

Issued by R3

About this certificate

This digital certificate with serial number 04:64:90:53:0f:6a:15:46:ec:95:0a:1c:a7:06:e0:b5:98:33 was issued on by Let's Encrypt.

With 35 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=sasfoundation.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:64:90:53:0f:6a:15:46:ec:95:0a:1c:a7:06:e0:b5:98:33
Serial Number (int): 382669220523808033417752855880899744864307
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 60:2a:55:15:97:57:93:8f:6b:c9:2c:89:c7:fc:87:96:eb:ec:31:ba
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 96:f1:bd:e5:7e:a6:ff:6c:92:82:ee:53:c6:c4:37:e8:45:7b:84:aa
Fingerprint (sha256): 29:a3:3c:e8:c2:90:89:ab:e0:54:62:04:ad:b1:d9:8a:e1:e7:59:d5:5e:cf:59:41:e3:c7:9d:32:d5:da:3d:f4

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate sasfoundation.org

35

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sasfoundation.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

annoncecampus.com
arconcealedcarry.com
bambooremovalguy.com
befitpal.com
bidmarketplace.com
bothell-living.com
certificatecoursesonline.com
cimbalom.com
dcidtv.com
delaware-dentist.com
designerforvip.com
disastermastersplan.com
electioncode.com
forestrywizard.com
fwspas.com
heavy.pics
heritagemills.com
holyarbitrage.com
howtoburybitcoin.com
huntingtonchristmaslighting.com
israelpaintsandhardware.com
lendingblogs.com
merchantaccountsystems.com
moviceutica.com
rxsugarisnaturesozempic.com
sasfoundation.org
schedulesupport.galandnsoil.us
sgfcsurvey.com
smokelessashtrays.com
timothyvdixon.org
usedhardiggcase.com
vt.cosfacts.org
www.bidirectionalconverter.com
xn--ibi.tk
yankeecraft.com

Other certificates including the domain name sasfoundation.org

(limited to 100 certificates)
sasfoundation.org
macwizard.org
sasfoundation.org
norwoodcastings.ca
www.xn--z8h.gg
sasfoundation.org
www.sasfoundation.org
euroverse.org
enerpactoolgroup.asia
www.sasfoundation.org
thebuildersshow.com.cheeselam.org
www.sasfoundation.org
sasfoundation.org
sasfoundation.org
www.sasfoundation.org
hydratight.ca

Certificate

The complete raw certificate details for sasfoundation.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOImMx2b9uWG7NCqN+Pw
+MxUrCFFGzvu+Fy0NRjPTNw5bjxLxAEvTJ/xRyqUQUnRySYHHpqqMhPbf5jL50lp
KDBvzTxNQ0yjHhPNjWP+8pJvDV2UKumqDbm6hOtq1hog8PhDpi3cgFuFL3jGri+U
hacvvEAZhzGmqFsV1sje17/JaLV8B10sTQq9m746PzNB26rr7CfpdlCA6RoHbWXc
n3XNCRM9z96fFRT/yqX6hoM9D0YjAq0NHs63ay+Z1I23ZbX0J3tbhoIFV/1PQOYz
cCqkgCfWa5PHzVlZ3/3Ml+tbIiP0Y0GkQSy8CDpLcpE9+2Wm2wnJ5ivGbhN57ZfP
HQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 382669220523808033417752855880899744864307
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-06 09:03:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-06 09:03:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sasfoundation.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20814600349909946431871699259539773590153759279253899913388303865186324262873611723154624864664471417265848659491547688193662390991655376779495472562985526640152775276972742789238842291123520190346483276234962860191583577173769157166455508541522892695907785337076022665920176237342866516396105896365622890067731197368799885886650132236503350685087861909014750024306194976951923484315249815072397508212249946131056894709939637486284551533159192134126907201837894784303311964371665850375607012130545335613755472835030690993781922990499906440023511862940872846311491511431929767238262153415677091909523422432616284409629
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							602a55159757938f6bc92c89c7fc8796ebec31ba
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (728 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'annoncecampus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arconcealedcarry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bambooremovalguy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'befitpal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bidmarketplace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bothell-living.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'certificatecoursesonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cimbalom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dcidtv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delaware-dentist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'designerforvip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'disastermastersplan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'electioncode.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forestrywizard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fwspas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heavy.pics'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heritagemills.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holyarbitrage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'howtoburybitcoin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'huntingtonchristmaslighting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'israelpaintsandhardware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lendingblogs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'merchantaccountsystems.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moviceutica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rxsugarisnaturesozempic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sasfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schedulesupport.galandnsoil.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sgfcsurvey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smokelessashtrays.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'timothyvdixon.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usedhardiggcase.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vt.cosfacts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bidirectionalconverter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--ibi.tk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yankeecraft.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d7ddf2cdc0000040300483046022100fb90e609b93c6ed4134eea6b872edca68656821fdeb2dbb7624cdf5a51d69669022100b17755d74b3bdfc839a0f0db24940ed5cb80129c85905403836fbd41c5fe81c6007500a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018d7ddf2ce20000040300463044022035295513e9f233a9fac8e81e3edd365a0332ebcb2c9d1ccb65352f4fd120710502205e0e6f7fd45a8bce41f3fb77577e0603ac823334c6ab14ad15f91de75f2ce372
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00738bacb341e914cd8e430411accdb77ec9e1fb52e92ca05e399a302504ccbbfe4dd6ac3d1acc1207604c42b911655b661b05b01cb9dc88a983c98e66122679174a7c8eeaa50e605339f5faa41b5a1af4a43a0508db3fea880a31ae20305211f110c0e2fef8389b8c1a421a263a9465961f7c6663e31510053a69b38bdc35b817303567b9083d78268d921b055518281efaa8e7a7dce6f21295c9b59d1c23cdddddbacc83fd2b004d1435f5bec65ff441cbb6d9bbd3d19409ede9dc5d311a59d15f1f2e04b3d138d25cbc477f686bfa8bba19cdddc5b9eba99fe2ea0ceed75e528e0fb0b01ed95a40d5921ecba5c977af35ce39f2e913ea26c9be7419179391ff