exodusinstitute.org

Issued by R3

About this certificate

This digital certificate with serial number 03:a4:ae:64:15:fa:bb:69:55:ad:05:30:a9:4d:bf:dc:7f:fc was issued on by Let's Encrypt.

With 13 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=exodusinstitute.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a4:ae:64:15:fa:bb:69:55:ad:05:30:a9:4d:bf:dc:7f:fc
Serial Number (int): 317374971317062720136404875723314881658876
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: a6:29:e2:6e:49:f0:0d:6f:fc:bf:eb:ac:62:4f:ba:0e:0a:5d:77:fc
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): c3:a1:d2:ac:2e:bf:1c:96:4b:e4:3e:74:85:67:c0:fb:62:8f:26:42
Fingerprint (sha256): 3e:3d:f9:b3:c8:d7:b8:cd:82:67:f2:d2:c7:4b:37:81:01:8d:d6:40:00:16:3b:ef:31:b3:0a:75:6c:c6:c9:0e

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate exodusinstitute.org

13

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for exodusinstitute.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bismuthking.com
chaletforvip.com
chinadestiny.com.buydirection.com
convoy.vc.tamitutu.com
exodusinstitute.org
gaymedicine.com
hempmatting.com
rauit.com
sellyourhomeforonedollar.com.starttruckcompany.com
twistingcapital.com.hart-bleiben.info
velorevolution.com
wellstar.com
zerobuckle.com

Other certificates including the domain name exodusinstitute.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for exodusinstitute.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyG1ZtfP1q2++eDNlhelH
xXYfs2CKCZ0rcIsj8bm3TGU3H1CpwbURli9iz4Zi48mtFp+M80qAaq2wwsTXTF9y
oyHZ9lhPqwTX53TA/2zXTB1TPCEfTUe8JWEkW+JiaxuQa8gbbSLwNHhGzqDmMRBB
HXLREPrfnBm3/MG5Yo0c2BNZOpY2tNxuzfUWB5HvifkcUmfBs5vHlZbfilKsb0YD
jpAAYnJkMKvHcZBiNxHxRc4dWcWk0iRZbPm3FfrxpwI7QS2ygSTw5Bw0652VgFeJ
9v36FFLltL0jpzCA6C4Bq7lgpQsK861ctNd1GCCEYyKJ58ZiI/j1qyeHs4SBmNMR
HwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 317374971317062720136404875723314881658876
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-11 06:00:59 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-09 06:00:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'exodusinstitute.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25301583701269389895875295444576484883381790583538000378077812570797132305871249184081801585483229529841908192487667855726671608717565913080759694518934227418528271842237355434635301285063985125541434284000241627345761449391763189549209795480576829926303711183172964612522654672363002015890128666857417998053952957377450491019408876863878884701218446775006556747573835649757240545235779782872986790150660118484276041457273557834200937828090829619571551123968295582892727101828744433271099926469287375837382423814752820813587524284287915313485663198063162340692533146301835828445096194595924241877318356122381526962463
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a629e26e49f00d6ffcbfebac624fba0e0a5d77fc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (305 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bismuthking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chaletforvip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chinadestiny.com.buydirection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'convoy.vc.tamitutu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exodusinstitute.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gaymedicine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hempmatting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rauit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sellyourhomeforonedollar.com.starttruckcompany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twistingcapital.com.hart-bleiben.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'velorevolution.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wellstar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zerobuckle.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018b1d89ea4500000403004730450220768bb05baea377218791fd166978af94afbc0695d7914bcbe1967089e659ef6d02210099d664fb9f6e237c161b9f67d90e31a4239db11cdb46b8fa614f125e8412076d00760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018b1d89ea870000040300473045022027ab2d9f405309da72c676c90fd45346cae22cbd5494769d270e58d35e3f2dba022100e0c7b0839e0f62efd7ac5b978ed5ef7eeb784e771cb7a4caface35663a67c258
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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