thecommunityinvestment.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:83:7a:3f:09:0f:8b:05:6c:15:01:ca:ba:2e:c9:dc:3e:7a was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=thecommunityinvestment.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:83:7a:3f:09:0f:8b:05:6c:15:01:ca:ba:2e:c9:dc:3e:7a
Serial Number (int): 393188626907644906572808888279161301122682
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 3f:19:fd:53:ce:dc:b0:6f:53:0f:69:44:ec:1f:64:c3:b8:fe:e8:d5
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): c8:5d:e0:02:ea:c8:dc:22:d8:9b:d2:1f:26:d8:49:1d:27:32:f7:95
Fingerprint (sha256): 2e:38:74:82:7e:7b:95:bc:d3:7c:27:8a:04:89:6a:a2:d1:d9:7f:05:b8:ce:51:9f:6c:4d:50:c5:66:8b:39:88

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate thecommunityinvestment.org

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for thecommunityinvestment.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

thecommunityinvestment.org
www.thecommunityinvestment.org

Other certificates including the domain name thecommunityinvestment.org

(limited to 100 certificates)
thecommunityinvestment.org
thecommunityinvestment.org
thecommunityinvestment.org
thecommunityinvestment.org
thecommunityinvestment.org
thecommunityinvestment.org
thecommunityinvestment.org
thecommunityinvestment.org
thecommunityinvestment.org
thecommunityinvestment.org
thecommunityinvestment.org
thecommunityinvestment.org
thecommunityinvestment.org
thecommunityinvestment.org
thecommunityinvestment.org
thecommunityinvestment.org
thecommunityinvestment.org
thecommunityinvestment.org
thecommunityinvestment.org
thecommunityinvestment.org

Certificate

The complete raw certificate details for thecommunityinvestment.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+8PP9Du0aw8wJpkPgeQ5
jAv+DOLNEyYRadY5TGv7WrbTSGDTosG0BVOYTHufa1VpfrXVLqEwrR4+JDE5CPrS
Z79Ca+l8uF3dkvFlYjOYdmFzwsQkkp1chGy5gDZqLkswCcI7c1aOgj8AFxMrzhGk
EmGkLzp571Y8ApPpIxg5/OcdQEUnTq41xLu3D0PYIUSqg4cZU+Nxli7eLC2tCQ+Q
N42ny3/ctU4/3rkvdxR3WV7iu85sdHa+wAdzm5hMmBjsK+RGrx6ccqR+tqTW5912
0QIXBSv37y/zOLncb5kkU+BeU0yah3IXyaOHq9YZ7LnN0BdOP72Tz5ZAM61U9lE+
qwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 393188626907644906572808888279161301122682
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-10 12:06:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-11 12:06:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thecommunityinvestment.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 31782373200486511834527776665337799110931891599719464271163890086509470681976536520603209490833376508832589388407439346108716749463242957560636264018561494098436491360979280029517347094983779225272662691544606111170629271334092678522712174820852587673664259938053440125162342315551218970976113646533296202102386253768722657189758838687082825796636930388110637757582526752289125559644494021536722605497842047522561508222855924276489430347056800697880466732228446580583215331792331109427873467301431808460132883485828247924720325964050353322684677919553355680840343024550487457138895080771741292601914609781983713246891
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3f19fd53cedcb06f530f6944ec1f64c3b8fee8d5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thecommunityinvestment.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thecommunityinvestment.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc5600000168d783c207000004030047304502210082b2e2f9ca66b51d0be10ca3984d7c035e59ed684daa910b874a6e08e4b1323402206269d3f64922ac2c1b0075c551e3f6f0de11655d3a036b985da7d182f583c4e2007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000168d783c1df0000040300463044021f2c0c19e4a42e6147ee1e056659e865c03701d85c73859a001212efded50e75022100ab0d256f55932ad0dcf9d132069d3834a577720ac0fb335c9313d4d02bd57004
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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