saltlakespa.org
Issued by R11
About this certificate
This digital certificate with serial number 04:0e:71:4f:8a:e8:37:66:a6:fe:05:0d:a4:15:45:c3:9d:03 was issued on by Let's Encrypt.
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=saltlakespa.org
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 04:0e:71:4f:8a:e8:37:66:a6:fe:05:0d:a4:15:45:c3:9d:03Serial Number (int): 353363712636280249601815919397215137930499
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 4a:f2:42:82:5f:09:7e:07:82:c4:54:d7:ff:c5:a5:46:8d:ce:d7:cb
AuthorityKeyId: c5:cf:46:a4:ea:f4:c3:c0:7a:6c:95:c4:2d:b0:5e:92:2f:26:e3:b9
Fingerprint (sha1): 76:99:82:f7:f5:e4:e6:5a:f0:b6:ac:5b:d7:0f:8a:f2:5a:ec:3b:06
Fingerprint (sha256): 44:96:00:63:02:56:75:c7:5c:45:84:a8:a9:8b:a2:b2:14:a4:90:00:d3:50:20:40:76:b3:f6:9f:7a:d9:4e:ba
Issuing Certificate URL: http://r11.i.lencr.org/
Revocation information
OCSP Server: http://r11.o.lencr.orgCheck the revocation status for certificate saltlakespa.org
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for saltlakespa.org
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
saltlakespa.org
Other certificates including the domain name saltlakespa.org
(limited to 100 certificates)
www.cranburyschool.org
admin.bonnerprendie.com
admin.estrellitahigh.com
admin.aes.lammersvilleschooldistrict.net
ashlandcityccs.net
www.healthystartacademy.com
admin.bereanchristian.com
www.collegeachievegreaterasburyparkcharterschool.org
admin.cheathamhighccs.net
admin.aes.lammersvilleschooldistrict.net
acsaregionxv.org
debusk.greenek12.org
acsaregionxv.org
acsaregionxv.org
saltlakespa.org
gageparkhs.org
www.sttheresaschoolpalmsprings.org
nphs.bpusd.net
lacountycharterselpa.org
www.colegioangloamericanohgo.edu.mx
admin.aes.lammersvilleschooldistrict.net
admin.glenknoll.org
admin.dz.aceroschools.org
acsaregionxv.org
hanak12school.org
msdurham.org
healthystartacademy.com
admin.arcataschooldistrict.org
saltlakespa.org
www.saltlakespa.org
admin.cms.davidson.k12.nc.us
admin.arcataschooldistrict.org
admin.arcataschooldistrict.org
admin.denver.lincolncharter.org
bronxdalehs.org
acsaregionxv.org
www.leusd.k12.ca.us
sh.iasd.cc
acsaregionxv.org
grandcenterartsacademy.org
www.lincolncharter.org
admin.bbel.bbrook.org
admin.lincolnton.lincolncharter.org
southbayadult.org
www.annaleeelementaryandsteammagnet.org
saltlakespa.org
lincolnton.lincolncharter.org
mhs.molineschools.org
admin.sfva.org
admin.sainte-school.org
admin.aes.lammersvilleschooldistrict.net
admin.afsenyc.org
acsaregionxv.org
admin.bpusd.net
admin.bereanchristian.com
admin.afsenyc.org
admin.aes.lammersvilleschooldistrict.net
admin.bonnerprendie.com
admin.estrellitahigh.com
admin.aes.lammersvilleschooldistrict.net
ashlandcityccs.net
www.healthystartacademy.com
admin.bereanchristian.com
www.collegeachievegreaterasburyparkcharterschool.org
admin.cheathamhighccs.net
admin.aes.lammersvilleschooldistrict.net
acsaregionxv.org
debusk.greenek12.org
acsaregionxv.org
acsaregionxv.org
saltlakespa.org
gageparkhs.org
www.sttheresaschoolpalmsprings.org
nphs.bpusd.net
lacountycharterselpa.org
www.colegioangloamericanohgo.edu.mx
admin.aes.lammersvilleschooldistrict.net
admin.glenknoll.org
admin.dz.aceroschools.org
acsaregionxv.org
hanak12school.org
msdurham.org
healthystartacademy.com
admin.arcataschooldistrict.org
saltlakespa.org
www.saltlakespa.org
admin.cms.davidson.k12.nc.us
admin.arcataschooldistrict.org
admin.arcataschooldistrict.org
admin.denver.lincolncharter.org
bronxdalehs.org
acsaregionxv.org
www.leusd.k12.ca.us
sh.iasd.cc
acsaregionxv.org
grandcenterartsacademy.org
www.lincolncharter.org
admin.bbel.bbrook.org
admin.lincolnton.lincolncharter.org
southbayadult.org
www.annaleeelementaryandsteammagnet.org
saltlakespa.org
lincolnton.lincolncharter.org
mhs.molineschools.org
admin.sfva.org
admin.sainte-school.org
admin.aes.lammersvilleschooldistrict.net
admin.afsenyc.org
acsaregionxv.org
admin.bpusd.net
admin.bereanchristian.com
admin.afsenyc.org
admin.aes.lammersvilleschooldistrict.net
Certificate
The complete raw certificate details for saltlakespa.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIE7TCCA9WgAwIBAgISBA5xT4roN2am/gUNpBVFw50DMA0GCSqGSIb3DQEBCwUA MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD EwNSMTEwHhcNMjQwNjA5MDkwNjA4WhcNMjQwOTA3MDkwNjA3WjAaMRgwFgYDVQQD Ew9zYWx0bGFrZXNwYS5vcmcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCn9X9heHS5K021NNVVCArK/iCwFDrCD+yJMyJH54OGIrVsZD7udar2eHVMVS17 e1xSTZ+RwzPbXGItTDBRTTtd3Z8HeP0BQnrrG/4HRUkN0mdL4owg5mDbuML/xllL imdndnvog6vpTKh6BiW3khGKzte6ikb6nW3tF4/ZQjMDOUqWUqTSYC44V0JhTDX7 gtMiNxIvqYms4gbZ93Ul7bgwea19WP5KlbD2ycVfpAOkFr4X6o3cHnpcBMFdsmu+ lUFjpEXJGyBQ1ACi+/2W3ijVh8k3SW4wqMYEnTJf83GSyz4rayTBOWJqlgT2JSnQ an0/8PaDKY+3NnKjr5ioLQRNAgMBAAGjggISMIICDjAOBgNVHQ8BAf8EBAMCBaAw HQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYD VR0OBBYEFEryQoJfCX4HgsRU1//FpUaNztfLMB8GA1UdIwQYMBaAFMXPRqTq9MPA emyVxC2wXpIvJuO5MFcGCCsGAQUFBwEBBEswSTAiBggrBgEFBQcwAYYWaHR0cDov L3IxMS5vLmxlbmNyLm9yZzAjBggrBgEFBQcwAoYXaHR0cDovL3IxMS5pLmxlbmNy Lm9yZy8wGgYDVR0RBBMwEYIPc2FsdGxha2VzcGEub3JnMBMGA1UdIAQMMAowCAYG Z4EMAQIBMIIBAwYKKwYBBAHWeQIEAgSB9ASB8QDvAHYA7s3QZNXbGs7FXLedtM0T ojKHRny87N7DUUhZRnEftZsAAAGP/HZmZQAABAMARzBFAiAmjbN7HHJMZeu9ccx8 FQrFONkgswo6r78tgHXTd/lOXQIhAJN6dwhMtq19TlXChnF922G71st7VnEEiXqV DqG7NcVNAHUASLDja9qmRzQP5WoC+p0w6xxSActW3SyB2bu/qznYhHMAAAGP/HZp EwAABAMARjBEAiBM7soPgbpqsLSsfD5j8274hAAHX/kECTCxL1NFOpvvnQIgGqqo Ej+sV1bV8BqEw3xzAACp13u5IkpTRiNvvEdPfSEwDQYJKoZIhvcNAQELBQADggEB AIL07AITr5CO+SzAVkzLY9i6of1Oq9Wu+gjLHkf+DClfQJGxhUuOoE1rLu8gW3y6 AdWeXuur3n/qSDn/gQkQdi7ISYYEEyoco6PNqn0hF9bV4hh111xsdWa6onIaRpDr 25ksZ/DNFf1NEe8BbuiABA5r3QT1XU1tsQMhwuPeDwVl5T076A5EbkSMEBT4NUD3 Aa0f5CrCgj9vLG1E2NrUvwQ0q495xWWwH0rM2HKmv7P+dslCv1PdWTeIyTq4U2RH upSDQieyYiJqO6fM/darGbtlc9r02bkJdFZ1i/s3oStTP9A5VJWmR1Q6HD/c4OBg n613AH8mUTvlTiyiZNdrVmg= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/V/YXh0uStNtTTVVQgK yv4gsBQ6wg/siTMiR+eDhiK1bGQ+7nWq9nh1TFUte3tcUk2fkcMz21xiLUwwUU07 Xd2fB3j9AUJ66xv+B0VJDdJnS+KMIOZg27jC/8ZZS4pnZ3Z76IOr6UyoegYlt5IR is7XuopG+p1t7ReP2UIzAzlKllKk0mAuOFdCYUw1+4LTIjcSL6mJrOIG2fd1Je24 MHmtfVj+SpWw9snFX6QDpBa+F+qN3B56XATBXbJrvpVBY6RFyRsgUNQAovv9lt4o 1YfJN0luMKjGBJ0yX/Nxkss+K2skwTliapYE9iUp0Gp9P/D2gymPtzZyo6+YqC0E TQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 353363712636280249601815919397215137930499 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R11' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-09 09:06:08 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-07 09:06:07 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'saltlakespa.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21202856298483281297761615963982791055495992699628894951615603664000216627142561640240401948975826616620555173714390639456849162531715153283243135742832003871270875972643069436443308240018035997351865861569069864287126875782992590162311365589927447958065079475434752342346816530825202104532088373665625451110445876657364445729513433268960553076422365459751900248167297236050455875230783791569469626009196363243652725258540856942358184721929076692581455645991243695166891788891878702871923290288961093935383979534952894852419667166210121425109088885668561181838798643761168084491229348071294232204673170903638284764237 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 4af242825f097e0782c454d7ffc5a5468dced7cb . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c5cf46a4eaf4c3c07a6c95c42db05e922f26e3b9 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saltlakespa.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018ffc76666500000403004730450220268db37b1c724c65ebbd71cc7c150ac538d920b30a3aafbf2d8075d377f94e5d022100937a77084cb6ad7d4e55c286717ddb61bbd6cb7b567104897a950ea1bb35c54d00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018ffc766913000004030046304402204ceeca0f81ba6ab0b4ac7c3e63f36ef88400075ff9040930b12f53453a9bef9d02201aaaa8123fac5756d5f01a84c37c730000a9d77bb9224a5346236fbc474f7d21 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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