linkto.org

Issued by R3

About this certificate

This digital certificate with serial number 03:ad:97:ce:63:64:c1:8e:a3:0e:67:75:ef:c4:cf:38:59:5f was issued on by Let's Encrypt.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=linkto.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:ad:97:ce:63:64:c1:8e:a3:0e:67:75:ef:c4:cf:38:59:5f
Serial Number (int): 320407492329060744647650614600549856205151
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: bf:f1:08:00:a2:6e:af:a7:4b:8c:80:0f:b2:79:ae:83:9e:17:87:95
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): c7:f6:51:da:64:15:1b:46:d2:15:27:c4:31:2a:ba:5f:29:45:5d:df
Fingerprint (sha256): 3d:e7:34:af:94:1b:16:ae:16:e1:a1:91:37:a1:fb:db:78:3f:2e:5a:97:c8:75:cc:27:2c:a8:76:c9:29:b1:48

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate linkto.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for linkto.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

linkto.org

Other certificates including the domain name linkto.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for linkto.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 320407492329060744647650614600549856205151
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-20 04:07:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-19 04:06:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'linkto.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 695538903290900696030809584571978915684793741601087088095395047760681716079339026722193186544933584687971732919128737849112950490248158494302183513086265966080653472113090852612851561990489983898572014984553132974677788321390911832171437195061944429454317273407345486329492977742518146018472259919988594071370227599186726914662151043938050878959522261417118458054976438292062391487886900970122098007594369766482319047718871405587398969178085916935534707415749283059977959843190490654924073330578707510249676052482621276621355479497013176812203088420721086602100431892514762497858196451055978297456352771154690613793709157759240826846478432955125100398998075747425105026244729678546615945775165968817088353016517087757251547720418361449068453196714058603126952441846015339324009701860171352837820088489750196329246156527706608459946379859121555141339504953731885413782507817661289135210763894387918478423127372090550075449773828786327407827359741025309657260480300521958532081241862372314267017605211199986893532570071391705177046537303169509937273247826385097669054727869590790244820075855426719085750155778111320664771501551255956221063000853780203809452452087762740370923494465113806096536942935074201722982089191244528880285916991
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bff10800a26eafa74b8c800fb279ae839e178795
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (14 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'linkto.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca0000018ef9e690a0000004030047304502205875c0cd8860ae1665fb9e36c8a99a64703eb2847a86ed36bc8af61bc19839c3022100a8bfbec0cba8ec6d2807f40e0397c89dbb75dbf2effb7c08d57ce1fd7b01eaec00750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018ef9e690d2000004030046304402204e51d74514685ccf2ae8bec20eb7d81887fe9d0e7540f912023c2e7dd87d6f9402201457faaa214a6f910ab1c27eac0fd982d0145c50367388832cc91f1d621af35f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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