linkto.org
Issued by R3
About this certificate
This digital certificate with serial number 03:ad:97:ce:63:64:c1:8e:a3:0e:67:75:ef:c4:cf:38:59:5f was issued on by Let's Encrypt.
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=linkto.org
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 03:ad:97:ce:63:64:c1:8e:a3:0e:67:75:ef:c4:cf:38:59:5fSerial Number (int): 320407492329060744647650614600549856205151
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: bf:f1:08:00:a2:6e:af:a7:4b:8c:80:0f:b2:79:ae:83:9e:17:87:95
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): c7:f6:51:da:64:15:1b:46:d2:15:27:c4:31:2a:ba:5f:29:45:5d:df
Fingerprint (sha256): 3d:e7:34:af:94:1b:16:ae:16:e1:a1:91:37:a1:fb:db:78:3f:2e:5a:97:c8:75:cc:27:2c:a8:76:c9:29:b1:48
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate linkto.org
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for linkto.org
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
linkto.org
Other certificates including the domain name linkto.org
(limited to 100 certificates)
Certificate
The complete raw certificate details for linkto.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF4DCCBMigAwIBAgISA62XzmNkwY6jDmd178TPOFlfMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDA0MjAwNDA3MDBaFw0yNDA3MTkwNDA2NTlaMBUxEzARBgNVBAMT Cmxpbmt0by5vcmcwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCqfXbX yVAoaqQimC5bvLYbDVfCsOXhajc2xsQGJMhRQEp1OWJBY5hVaykXWNgMn34I9qTo G28oo351DPrTJSQ4XWtYGTVU9stYAZWi5C8nDdlX+9RiVLwzqNuSsjWVnojRTSxR zUwqi5XwhvbfjbKrWPW6d3fcEe0s7J54OvQ2KyCclWoy/sFAQ7XIbDPjUoAZMDhY 9cz3fCbN2XON1eSWjCJVx5TrNxMyhGXFlEmB0uLDIP/eb3ln//2pHx99jNwr9j7g EWFQUAULYL7dHhM6h4Qjw2YxlZGwlAbks5sjxcgOq9vCrmGK3XorrZUDFhXfz90q egwAkK5Bplk74tGmT5rULjxTyTgWo5rqpEcM08Zo8SAl3nHrUavM88H1zEwQkCSv 1aGzuiDWEHSbxIKKt7NHEhNBBLfc6nb2KfYRe4Tn1tJwn/7Xrs7uI/Gy1dP7/PdP ccUtsncBz88WcvXXcMbQF6impHHRg0ZAgIO31n3gzqyB8KyFmRi0Ue7MnAORZfwc 5IBgblTWWPojI3xY23FYSduqgqDS8BUCrqgU3D6srIc0T41jPpZi6tf5HiGBDCzj UYJ5IQIWSAoERjfRPNnns7UVmPJb8/VknZrXL+TR7dBJfHeCRnqedO6SqXjUJIQ6 1H4W/QM5OiwHbSXFBtP52OcXLvTBwvcbBgAfPwIDAQABo4ICCzCCAgcwDgYDVR0P AQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMB Af8EAjAAMB0GA1UdDgQWBBS/8QgAom6vp0uMgA+yea6DnheHlTAfBgNVHSMEGDAW gBQULrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUH MAGGFWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3Iz LmkubGVuY3Iub3JnLzAVBgNVHREEDjAMggpsaW5rdG8ub3JnMBMGA1UdIAQMMAow CAYGZ4EMAQIBMIIBAwYKKwYBBAHWeQIEAgSB9ASB8QDvAHYAGZgQcQnw1lIuMIDS nj9ku4NuKMz5D1KO7t/OSj8WtMoAAAGO+eaQoAAABAMARzBFAiBYdcDNiGCuFmX7 njbIqZpkcD6yhHqG7Ta8ivYbwZg5wwIhAKi/vsDLqOxtKAf0DgOXyJ27ddvy7/t8 CNV84f17AersAHUAdv+IPwq2+5VRwmHM9Ye6NLSkzbsp3GhCCp/mZ0xaOnQAAAGO +eaQ0gAABAMARjBEAiBOUddFFGhczyrovsIOt9gYh/6dDnVA+RICPC592H1vlAIg FFf6qiFKb5EKscJ+rA/ZgtAUXFA2c4iDLMkfHWIa818wDQYJKoZIhvcNAQELBQAD ggEBAJJw2ADZ3KJDSykzp8NJdjO1T57Xte/6Wf+ZoBlLZGrSZrhjZgCAxINBvwXM kMgMU1MPkH1DG/lefJDYpjC7mvRU2FL7+8gDiACb29EZOTQPzuSPN41+ivoa1ggl BsezrW0ad8cOQ7Bi5vma1/e8syV2RNKx46wIHZNmbx3TqFb8thUENW596RGHKT9L oCx2AuN6dv+jr+nGqSsZH+TBEKY2+TmmDLIiG9laS1vllv1TAfEeGgg/rpmwV4Ok ADOeJt3atkOpjeDde6EEb7yPajVdigylWam+0xwQYX5zZMJ2n+XD4VjSJY2B8tkP VKwzyT6aiHeJFUiWpHMv5bo1D9A= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAqn1218lQKGqkIpguW7y2 Gw1XwrDl4Wo3NsbEBiTIUUBKdTliQWOYVWspF1jYDJ9+CPak6BtvKKN+dQz60yUk OF1rWBk1VPbLWAGVouQvJw3ZV/vUYlS8M6jbkrI1lZ6I0U0sUc1MKouV8Ib2342y q1j1und33BHtLOyeeDr0NisgnJVqMv7BQEO1yGwz41KAGTA4WPXM93wmzdlzjdXk lowiVceU6zcTMoRlxZRJgdLiwyD/3m95Z//9qR8ffYzcK/Y+4BFhUFAFC2C+3R4T OoeEI8NmMZWRsJQG5LObI8XIDqvbwq5hit16K62VAxYV38/dKnoMAJCuQaZZO+LR pk+a1C48U8k4FqOa6qRHDNPGaPEgJd5x61GrzPPB9cxMEJAkr9Whs7og1hB0m8SC irezRxITQQS33Op29in2EXuE59bScJ/+167O7iPxstXT+/z3T3HFLbJ3Ac/PFnL1 13DG0BeopqRx0YNGQICDt9Z94M6sgfCshZkYtFHuzJwDkWX8HOSAYG5U1lj6IyN8 WNtxWEnbqoKg0vAVAq6oFNw+rKyHNE+NYz6WYurX+R4hgQws41GCeSECFkgKBEY3 0TzZ57O1FZjyW/P1ZJ2a1y/k0e3QSXx3gkZ6nnTukql41CSEOtR+Fv0DOTosB20l xQbT+djnFy70wcL3GwYAHz8CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 320407492329060744647650614600549856205151 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-20 04:07:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-19 04:06:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'linkto.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 695538903290900696030809584571978915684793741601087088095395047760681716079339026722193186544933584687971732919128737849112950490248158494302183513086265966080653472113090852612851561990489983898572014984553132974677788321390911832171437195061944429454317273407345486329492977742518146018472259919988594071370227599186726914662151043938050878959522261417118458054976438292062391487886900970122098007594369766482319047718871405587398969178085916935534707415749283059977959843190490654924073330578707510249676052482621276621355479497013176812203088420721086602100431892514762497858196451055978297456352771154690613793709157759240826846478432955125100398998075747425105026244729678546615945775165968817088353016517087757251547720418361449068453196714058603126952441846015339324009701860171352837820088489750196329246156527706608459946379859121555141339504953731885413782507817661289135210763894387918478423127372090550075449773828786327407827359741025309657260480300521958532081241862372314267017605211199986893532570071391705177046537303169509937273247826385097669054727869590790244820075855426719085750155778111320664771501551255956221063000853780203809452452087762740370923494465113806096536942935074201722982089191244528880285916991 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) bff10800a26eafa74b8c800fb279ae839e178795 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (14 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'linkto.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef0076001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca0000018ef9e690a0000004030047304502205875c0cd8860ae1665fb9e36c8a99a64703eb2847a86ed36bc8af61bc19839c3022100a8bfbec0cba8ec6d2807f40e0397c89dbb75dbf2effb7c08d57ce1fd7b01eaec00750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018ef9e690d2000004030046304402204e51d74514685ccf2ae8bec20eb7d81887fe9d0e7540f912023c2e7dd87d6f9402201457faaa214a6f910ab1c27eac0fd982d0145c50367388832cc91f1d621af35f . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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