chuck.org

Issued by R3

About this certificate

This digital certificate with serial number 03:ec:3a:68:89:e4:b6:60:a5:b6:aa:4c:1f:b2:c4:94:25:b8 was issued on by Let's Encrypt.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=chuck.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:ec:3a:68:89:e4:b6:60:a5:b6:aa:4c:1f:b2:c4:94:25:b8
Serial Number (int): 341721134408061609924687227014463851079096
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 9f:6d:d5:19:53:82:6e:0b:73:b1:51:d4:ee:ac:df:8c:31:7e:99:a3
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 43:f9:a8:6d:ba:ea:e9:8e:d6:d5:d2:62:c6:42:d8:0a:67:fe:4f:9b
Fingerprint (sha256): 32:42:9f:5a:0b:bd:5a:6e:70:4f:cb:6c:58:8f:6c:92:96:54:0d:c6:b2:81:d4:52:ac:2a:9b:8d:e5:3a:a0:02

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate chuck.org

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for chuck.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

chuck.org
fourthstreetevangelical.com
museumsearch.com
stlmetro.net
umiglobal.com

Other certificates including the domain name chuck.org

(limited to 100 certificates)
chuck.org
chuck.org
chuck.org
www.learnthe.bible
lexingtongop.org.chuck.org
chuck.org
boothlaw.llc
chuck.org
chuck.org
onecloudmanagement.cloud
seiterre.org

Certificate

The complete raw certificate details for chuck.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlL7yzWuEbqCi1D0CcHo9
2ItObs8TCR0Ib47Z8JWu8EJrVM1aekKtBzWCmFdgZ1z2JcAGqBBsKApbkmRbZ26L
15NO4fxGbj0+r7v0w7qVgl+5AqAZrn+UE9xeLyMoBdYvJOpu9N9pna0i94XSK5k8
puTuwOYGZK7ZnaTAd3/4fAkbWRIYrd6x23JMEDvFgScPnWt8MmaKCMTux4ZSMLk0
tmifCU0T6LZevGLWdOWXHX5uVlf3dninTvxy4qVUiN3MP0i6+ouMm8J0hMdpKFZi
FePFSu4+w54t1o+Lzl9+UjVJfp75yLQWI0AoDCRZdStlrDYixWx0gAf2ZjlECERe
ewIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 341721134408061609924687227014463851079096
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-06 23:35:17 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-05 23:35:16 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'chuck.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18777429323571083284498497942969767326453152882691811746609319220827482416015813825048537528454303642824280755712339520552703690647403684066785675004006594311877373176659864914197172468022213523342773327392707826774783316668633067287373996703846390785369943874856228862394402513576319167113690546150555802798013457341390107214577800733661415157125978960692051250956804254853023953095596028040884093684771676906536990517493540735742414639160709356429094998581159507838998492736959607001284893598290710139343124829852240508236627628598492684384958322526817591461063794255203087055291887840086271353565034203540053319291
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9f6dd51953826e0b73b151d4eeacdf8c317e99a3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (89 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chuck.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fourthstreetevangelical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'museumsearch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stlmetro.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'umiglobal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018eb5fb22280000040300473045022100df74c097260a548e76f24d4b4f9594dcd6d935499b9311efe9c3d6b34d0ea061022010f37a5a26fff3eb520369739f8abdcaefe6740d23d2f7a1d27ffbda1e7a1af0007600dfe156ebaa05afb59c0f86718da8c0324eae56d96ea7f5a56a01d1c13bbe525c0000018eb5fb227e0000040300473045022100b3c235af1647eca63f70a6e8ad453ed7fcd4d3760364fadd75c931754eba8d5a02201249d61b740a3760897343b6beae36c70ea69211d780b90284a2d9cc7d14e91c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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