rockandreview.org

Issued by R3

About this certificate

This digital certificate with serial number 03:64:21:76:ba:34:24:71:b8:8d:96:f9:16:ad:51:1f:01:52 was issued on by Let's Encrypt.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=rockandreview.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:64:21:76:ba:34:24:71:b8:8d:96:f9:16:ad:51:1f:01:52
Serial Number (int): 295409575478924125290126083280671067799890
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ef:d6:e4:9d:30:31:8c:b2:61:41:8e:45:79:89:a8:1d:b8:72:89:cf
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 45:90:0b:f7:ce:e7:b0:f8:b3:07:47:2e:d0:99:18:9f:95:0d:78:ec
Fingerprint (sha256): 37:c6:96:dc:a4:be:a0:5d:a2:e8:9a:24:8d:7d:09:c8:54:5d:a8:10:8f:34:ff:f6:fe:19:92:60:20:17:7f:18

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate rockandreview.org

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for rockandreview.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

clarksgrove.com
industrialhempworks.com
rockandreview.org

Other certificates including the domain name rockandreview.org

(limited to 100 certificates)
light.thebo.ng
rockandreview.org
americansignlanguage.bible
rockandreview.org
timemanagementformortals.com.rockandreview.org
htpcorp.hacker.rehab
anytimeschooling.org
greencycstudio.com.rockandreview.org
homeschoolconference.org

Certificate

The complete raw certificate details for rockandreview.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyf8sgazG5DQ58baSsFSP
ZlFmFVeUMl/weXYedaQLUnSWBY21zvFj2maKbJuxM4NI0kOdcmv3FvxdgFkmkk8L
k4sK5yksS6p4EzCsyUZwZ5UlcMzpb9ekzLqrENh44OW/b27l0BAuiNUKrl9ysQ/5
CcbrgpDZb7yWIj9GZfg0BPrJYsxUCbsMqNbyHsN5DBKK6Yb7QSWRjfCFnsQTGXzF
SoBiccYjyflyF60LjQHFploC+MrDw6CkRGNIEPrilJBgZXnthKmREHPG7eTB4PHs
zQCbo9llDMpWPFxhGa6EqqO35H076Izt58R/73pqY7RSpQ6ol+uCg/77Ra+6bd3f
OwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 295409575478924125290126083280671067799890
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-17 09:40:34 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-16 09:40:33 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'rockandreview.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25499730215210927034606193124974068390647306980949157157657418633172492777749240690957266297297785580587840511519604072095617438067684684103179166736214772843443871776953400453112547464495873117350357776341524083477847783004029976289342969339403117061627449522574086253163980069979373769953086437392051472301644239168421942558979809857230815840141507888445068114179551474408783253255975801476337294701474855362193122548638363954970128332763265160596420752926652493361439848113279815996463569567490062034647833822020210065014191387546865943366347721637525306189295586308208786090581220667206814458143387699388929138491
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							efd6e49d30318cb261418e457989a81db87289cf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (63 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clarksgrove.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'industrialhempworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rockandreview.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d17022c90000004030047304502206797dd885805c63e9b7b982780cd192430cfd5de7fae5de11766e7960cda1987022100a85e0b6d764263b250925535d9ab169bf3aa94c45237102b1d64fc875f796658007700a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018d17022ca10000040300483046022100bfd9d7b0e85558dd834cd521f0ea9a2cef652ac445c7e22783b2a0d6f0d0e9cf022100996e85da8e6a99178239c0637f6b8dfd1b60bc8bb6f06c8b6c64492528d5ea6c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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