gw.ampr.org

Issued by R3

About this certificate

This digital certificate with serial number 04:e8:35:3c:11:d9:8d:ca:14:cd:a7:2c:7a:c5:9a:88:12:a5 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=gw.ampr.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:e8:35:3c:11:d9:8d:ca:14:cd:a7:2c:7a:c5:9a:88:12:a5
Serial Number (int): 427465413836324178956235209143557070262949
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 4c:09:ac:a9:00:fa:a9:1c:e6:ec:7a:e1:35:d9:47:5a:e2:b1:7a:30
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): da:b2:07:16:57:83:15:88:9a:24:58:c6:85:c8:ab:48:7a:f9:0c:f4
Fingerprint (sha256): 32:e9:ea:21:e0:69:ae:38:63:60:bf:a6:c9:8e:7e:0b:24:84:1e:96:68:cc:4e:29:f0:a9:65:42:69:c2:43:4c

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate gw.ampr.org

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gw.ampr.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

amprgw.ampr.org
gw.ampr.org

Other certificates including the domain name ampr.org

(limited to 100 certificates)
n1uro.ampr.org
db0gw-i.ampr.org
sp2l.ampr.org
jplarc.ampr.org
f4mzi.ampr.org
ja3yaq.ampr.org
sp2l.ampr.org
db0gw-i.ampr.org
www.n0qbj.ampr.org
mattermost.pi9noz.ampr.org
hosting.va4wan.ampr.org
as15780.ampr.org
www.crarc.ampr.org
www.n0qbj.ampr.org
ja3yaq.ampr.org
f4mzi.ampr.org
www.stagecraft.cx
de.ampr.org
jplarc.ampr.org
f5pql.ampr.org
hoseline.pd0mz.ampr.org
www.stagecraft.cx
www.crarc.ampr.org
jplarc.ampr.org
wiki.ampr.org
sp2l.ampr.org
f4mzi.ampr.org
n1uro.ampr.org
as15780.ampr.org
www.pb0fh.ampr.org
www.ampr.org
ja3yaq.ampr.org
portal.ampr.org
portal.ampr.org
f5pql.ampr.org
de.ampr.org
www.pb0fh.ampr.org
db0gw-i.ampr.org
www.pb0fh.nl
de.ampr.org
pi2shb.ampr.org
sp2l.ampr.org
db0gw-i.ampr.org
ampr.org
bm-lastheard.pi9noz.ampr.org
www.n0qbj.ampr.org
www.pb0fh.ampr.org
wiki.ampr.org
weblog.pe1pqf.ampr.org
f5pql.ampr.org
www.ampr.org
db0gw-i.ampr.org
gw.ampr.org
www.5150fm.net
ncpa.ampr.org
wiki.ampr.org
www.pb0fh.ampr.org
www.oz6bl.dk
www.n0qbj.ampr.org
www.pb0fh.ampr.org
as15780.ampr.org
db0gw-i.ampr.org
portal.ampr.org
www.ampr.org
weblog.pe1pqf.ampr.org
as15780.ampr.org
www.5150fm.net
jplarc.ampr.org
ja3yaq.ampr.org
www.pb0fh.nl
db0gw-i.ampr.org
ampr.org
bfoo.com
ncpa.ampr.org
jplarc.ampr.org
www.pb0fh.nl
serveurperso.flnet.org
gw.ampr.org
ncpa.ampr.org
de.ampr.org
db0gw-i.ampr.org
weblog.pe1pqf.ampr.org
www.ampr.org
mailman.ampr.org
jplarc.ampr.org
f4mzi.ampr.org
portal.ampr.org
ampr.org
f4mzi.ampr.org
weblog.pe1pqf.ampr.org
mailman.ampr.org
www.pa3get.ampr.org
wiki.ampr.org
portal.ampr.org
www.oz6bl.dk
mattermost.pi9noz.ampr.org
sys6.pe1pqf.ampr.org
mattermost.pi9noz.ampr.org
www.ampr.org
de.ampr.org

Certificate

The complete raw certificate details for gw.ampr.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyDsZwrMemLJdPpu/ufv1
uHfeNVEzomwf1Y72rxZ8rF8Zp0dA6o90k410fMG45TUqOj8W7i95bZbnq/1/kCLe
PacHuZd2ISLWAIK/nHqDUoP5yQNMjlJWBFGnkfY7nBhPRU/q6CZYL8hvtDIveCu7
jcBcKS4R2R96C0jj4x3KesH61joVgqnAn77BluTbzVZBvsJBSMxsXcP8K6nPvHm+
jExtZrI7F1dtUkJwU7JCJad0LMqLz6vcrEwu4fbXN7cXLwYES00PgNk3v0GQ6zRg
ORey6US/btUlmGLrBx+09i6ZgmFOmObrD8BN/cUW/yPIY6cDX5oJvhgnKnzZw3r4
rwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 427465413836324178956235209143557070262949
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-01 10:43:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-29 10:43:24 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gw.ampr.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25276804598647283828076069763264691154535356289026068685990332693564436197142867518375317744484670732443678293690404611940853794836075022129200292700647074468887837534599930307904594271120392075503370294895007588488405074386258546475127080729856430857795793964325344634048280931063111836950620055180714199921711047029241138605460733857221151264013062553164234971326037693500226923007161641547976998621076384879323210402105749116841149629053716318839634339462671750257838176390862495877158938531556405987063094893216533551305572423495316758389122294982042908462466659864972847081553008609687212666989754376202313463983
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4c09aca900faa91ce6ec7ae135d9475ae2b17a30
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amprgw.ampr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gw.ampr.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c2530d3bf0000040300483046022100d57fdc1ec62c5fd47f98cbc783c22f6c238f3f1262f3cb2c622d861635aabbda022100991f6bb942dd60a60079c12f3b7f16ff1288ab53deb1ddf1d64dc2e27d85c56700760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018c2530d4130000040300473045022100afa0b6e2df81dd4c5f6137de47d453b3457ee877d8d22915e9cbda181a51e1b302202d2f9ea5602e1122b47843e4f7c4b3ddadfc768dd9bc9a5a241f8866353f779b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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