taxreduction.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:d6:3b:41:bb:07:73:28:7a:88:30:97:09:f9:7d:a4:5f:ae was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=taxreduction.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d6:3b:41:bb:07:73:28:7a:88:30:97:09:f9:7d:a4:5f:ae
Serial Number (int): 334236050060809518653596471888499137863598
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: cc:d0:27:00:79:d9:b6:32:72:fb:67:c9:72:cd:4a:d5:c8:87:42:b8
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 6d:0f:05:ad:b9:4a:03:5a:15:1b:07:9e:72:d4:3c:94:9b:78:d4:c9
Fingerprint (sha256): 31:74:e7:d7:ca:c6:6d:5b:ac:46:d3:46:83:02:a2:fe:94:d7:68:7f:13:f2:68:c0:ce:a7:fd:13:b2:4c:60:08

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate taxreduction.org

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for taxreduction.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

taxreduction.org
www.taxreduction.org

Other certificates including the domain name taxreduction.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for taxreduction.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 334236050060809518653596471888499137863598
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-17 09:43:38 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-15 09:43:38 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'taxreduction.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 794045698509801277189408161421176986320390233753857793911142224433629672469080964044245851267630176905023616463415689756231778899394055684747716676998040103285783019619223250774205360258980845178871733991578558325465557650488066636483263959969512154390465891149933688529071724492924300481185647405489255639247574952507229124645377336287689864748427435592937017649733667981376642170341283410752131608389650034989207887820965021031177531340271410522689918954724607051715070720217687182092957741151961750181985101035534478621543132194318533077272534358207237221438937457423103323394294244288008891034883139762608993714746722853580134370543070903220506254802016091142309821417232820486208988771281873455374059869297186137719385338092965054197479162253704978620672473413984907871183274181774561038059185540061513383934693124137417545824621899485845843055353720763321528685106239509154260825245431953564340417815402938308591249930383071243242406114849009239243728634042701201413700633733460663535342846866080228777484084852297410203185704463410790111151097872807090186096034929465290718867665926578292833415876346935157726490464512855108629523739255350504029259976931461169367925855705766545358638073923328572984399334211444876514458950057
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ccd0270079d9b63272fb67c972cd4ad5c88742b8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taxreduction.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.taxreduction.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016bff87cf150000040300483046022100b0eb635d5091a931c858cae1ef44e18de16688387a98dc0d9955c85286dca366022100b7dfbbfb088f0ba8cc80c654d05405cdefa4fbc464d0af2885afb04d86cc4f5a00750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016bff87cf060000040300463044022035f1339063745032048e42a583513a5ba260de6cd7ce30ac838da0e09a49631c022045cabb64cfb77de3c2729540bdb88a7223eedefbf86a02699b4e0d1730e41565
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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