lgbtportland.com

Issued by R3

About this certificate

This digital certificate with serial number 03:f1:21:f0:7d:38:99:08:67:c5:f5:f0:2a:80:39:65:19:b0 was issued on by Let's Encrypt.

With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=lgbtportland.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f1:21:f0:7d:38:99:08:67:c5:f5:f0:2a:80:39:65:19:b0
Serial Number (int): 343390021438119199142203958491313699363248
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 9b:eb:54:80:e5:33:d3:4a:25:ca:87:a1:21:33:f0:b6:01:83:1c:4a
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): dc:9f:f7:37:70:ad:9f:49:6d:55:a0:ac:dd:b6:10:59:d8:af:fb:5f
Fingerprint (sha256): 2e:3d:02:2f:81:ae:16:c7:50:85:68:24:80:59:4f:ed:44:5d:c4:36:a3:e2:e6:26:10:ed:16:8e:bf:de:3b:49

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate lgbtportland.com

7

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lgbtportland.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

420forum.net
disastermasterplan.com
discover-galapagos.com.travelhairkit.com
lgbtportland.com
lifepo4sale.com.buymusicscores.com
proanimatedgraphics.com.mojowords.com
xn--6-1ga.at

Other certificates including the domain name lgbtportland.com

(limited to 100 certificates)
lgbtportland.com
supremepharma.com
commercialistavenezia.org
lindelllegaloffencefund.org
braunovic.com
finehealth.org
eringeemusic.org
vitalida.com
bbtft.me
lgbtportland.com
lgbtportland.com
resume.ai
rxsugar.org
lgbtportland.com

Certificate

The complete raw certificate details for lgbtportland.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4IhKnQPm4RCcCc7h/2Nq
WGeY+2nRX0ZbaREbTFuNXIcs1AKIWq9YtDH+WFEze/gRe49VYyF5qgIV0hJ+/YhB
EPea5RVM3S2UMnUA676im4Sn6so2oqYgsZ3hzf8f5p5MhahTQFWFjYzJ1oywcf1H
sqZfhxYJXqtIbrSPpFgTISOr9gdO5Mm0qiG9F/ZoboB2hH5f2vSmyRG8PhuWjRe3
ZS02ZCj8B4EoIdWeI9vfhZOnLEv336+sILzEFGCf3gf3jhoG7UqaRqeuDWcuk771
9veQHrmba3Ec8p2gsOTuGjO/cB7l+NX0OkqB8LwcwuSHZXu8NnDzWK+eQCNeGSOA
ZwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 343390021438119199142203958491313699363248
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-22 17:10:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-21 17:10:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lgbtportland.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28344588135385522630836089448498689026061211522148611332936525856138865965710567061239857770765449174108975683356388762734105324859161050502148185098519473478384785903573185137047588295133377284272510590349301614446822287404137873959679253598693459386399695764879533519028961867546794371092857434523495125589629869747911299293170811952665481667527930599601726629968976775758736681971667566625893573538714508362419652715303999770511541234987180407451097833129627087594900829361701525707369285746791939479862705524681051725593295839827736958900102458342988875654430305653447695409091811537783633900845945092508089548903
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9beb5480e533d34a25ca87a12133f0b601831c4a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (190 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '420forum.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'disastermasterplan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'discover-galapagos.com.travelhairkit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lgbtportland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lifepo4sale.com.buymusicscores.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'proanimatedgraphics.com.mojowords.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--6-1ga.at'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018abe1678d30000040300463044022047975f30d51e3a6f4934a39a0c241704955d38406d5da06ae99363fc89d7ed75022026ad228afe658e6696b0491b778e34d9372f08c46a2ef0a0fe51bb38242ebeeb007700e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018abe1679400000040300483046022100f8f4f02247c9f8b3eb647e33a98fd54e8b17a6c8de27e64a086092c24d27a92a022100c0f02e1405bb40c23a76beb87f94173d218cfae537ac142960bc2b0e1dac5a9a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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