mineralindependence.org

Issued by R3

About this certificate

This digital certificate with serial number 03:2a:63:a6:16:ab:b0:c8:16:83:6e:b0:17:d7:0a:fb:a9:07 was issued on by Let's Encrypt.

With 33 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=mineralindependence.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:2a:63:a6:16:ab:b0:c8:16:83:6e:b0:17:d7:0a:fb:a9:07
Serial Number (int): 275761173158637117181622237692297291213063
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: fd:61:4a:b7:54:ef:1e:29:5a:3b:10:11:5b:6d:7e:85:47:2e:5a:e7
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 78:81:23:a3:a4:7a:a2:cb:dd:24:73:eb:fc:31:bf:10:ce:51:6c:ad
Fingerprint (sha256): 3e:1a:5c:bc:b3:29:a1:1f:95:db:b2:23:38:2a:2a:c2:5e:08:b6:0d:16:9f:6e:68:fe:aa:87:16:b8:f5:8c:84

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate mineralindependence.org

33

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mineralindependence.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

arbitrager.com
asianpokerpalace.com
blockchaindevelopment.org
cartelfamily.com
collegerating.net
datesnyc.com
deathmatchwrestling.com
devaex.com
encircle.in
fitsof.com
freshroofjacksonville.com
hobbyhemp.com
kidmozart.com
koato.com
lgbtqentrepreneur.com
logcabinvillage.com
lucyimhomecolorado.com
mcknight.foundation
mineralindependence.org
obamacarebyzip.com
otellere.com
overlandparkcarpet.com
realestateinvestorsdaily.com
reguides.us
royaltyroofer.com
scienceismarketing.com
solarpolkcounty.com
thehempworks.com
transcanadatoys.com
twgfacebook.realbrilliance.net
typeflights.com
wtrvl.info
www.canibuild.net

Other certificates including the domain name mineralindependence.org

(limited to 100 certificates)
petrusville.co.za
mineralindependence.org
mineralindependence.org
whitestonerepublicanclub.org
scriptureuntangled.ca
collection.vc
mineralindependence.org
skate.vc
religion.vote
mineralindependence.org
enerpactoolgroup.co.za
zinnia.consulting
mineralindependence.org

Certificate

The complete raw certificate details for mineralindependence.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnst+PEMBOjVk5WVIeFUH
COohmkhq/8RWvpI/oAaUMRkzABMtRlWKpS/6+PcdQGu1LHKhYrGRizjcAxcjSEpk
YTZAP4/Q/TKWXWg9FgzApH9+79iTKWlJIpPfCFN14XE/LDQRWAzugRpyNtVC1L5/
UzhpkthSblCPzqxCDXPz0+UZTclBdsWhq8UUCfI2WZLDwEYVweszIZ3NwE+jPteT
5wXV8VtKHrKdXOYl8kStTinUKx3GkO7/HSAnri3bVOApOG8Yh+Uti3YenYlfLvNR
Khme5QvEOkaFvY4F6BKLTCo9obpFHf9BqYFSAnmdnH7LrH2CedQFQjHmtrrNLjR2
NwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 275761173158637117181622237692297291213063
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-01 03:20:10 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-30 03:20:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mineralindependence.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20045998375663143440956889457891648277716956210724899683198545604022015442536225615287201723070235276922682328559480122825347123736956410965437564148610456706319966363035578295127880138226714217670661691313692693917605463620492927697737126611145306456180528671205155548388896525429806606203584095393099598940793446122458302666575987008975349958172677685668557467760027184836449769541246883752915599069247938765830007979666649384109997913874115761166099074928812643848733828649346808681372242196882110435449183429067734540103784831974547923542277744253648161183045897487558572273497399785786687780876304481168571790903
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fd614ab754ef1e295a3b10115b6d7e85472e5ae7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (648 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arbitrager.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asianpokerpalace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blockchaindevelopment.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cartelfamily.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collegerating.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'datesnyc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deathmatchwrestling.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devaex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'encircle.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fitsof.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freshroofjacksonville.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hobbyhemp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kidmozart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'koato.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lgbtqentrepreneur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'logcabinvillage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lucyimhomecolorado.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcknight.foundation'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mineralindependence.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'obamacarebyzip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otellere.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'overlandparkcarpet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'realestateinvestorsdaily.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reguides.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royaltyroofer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scienceismarketing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'solarpolkcounty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thehempworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'transcanadatoys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twgfacebook.realbrilliance.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'typeflights.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wtrvl.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canibuild.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee0075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018df83db665000004030046304402202635e40a4f234c1b4b4290f937df1d61de3b130c674091916334502a31efcaaa0220521968b73827d483c4f8b7f15941e4a7608088e3fff226473f5ad9e62b86f683007500a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018df83db670000004030046304402205b580da446644616b11d8bcf8e50e23ff7976c721380a0c530ee84187c45f6e002203aec3bbc5d2a17410f24443cb2438b109b1e5cebdc12dbbb78bcf56cc5a8a3f1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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