investmentopportunities.org

Issued by R3

About this certificate

This digital certificate with serial number 03:78:57:4c:41:95:c4:f1:22:eb:61:60:30:25:24:28:ab:b1 was issued on by Let's Encrypt.

With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=investmentopportunities.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:78:57:4c:41:95:c4:f1:22:eb:61:60:30:25:24:28:ab:b1
Serial Number (int): 302286780606210462913252987484531329641393
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e8:04:f1:e2:02:db:dc:f7:50:a3:37:09:de:97:49:7e:21:34:87:21
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 5a:98:59:dd:a6:97:5b:a2:39:fc:ee:2e:00:23:d6:df:3d:b2:ac:aa
Fingerprint (sha256): 47:00:94:0b:bd:9f:04:50:21:1b:a0:97:df:40:5a:9e:bb:f2:ca:54:86:c5:11:ee:bb:f3:30:7c:51:cb:25:2e

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate investmentopportunities.org

10

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for investmentopportunities.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

adultsocialcare.com.highscale.biz
anabolicsforum.com.texaswomenslinks.com
enerpactoolgroup.co.uk.twospiesreport.com.sangy.art
finewinestore.com
historicwhitepinevillage.com
investmentopportunities.org
maakali.in
mep-properties.com
powellcounty.com
www.interviewquestionstoask.com

Other certificates including the domain name investmentopportunities.org

(limited to 100 certificates)
balmorallaw.ca
sculpit.media
lease.club
brilliantscience.org
canibuild.com.au.chiroport.com.investmentopportunities.org
sculpit.media
sculpit.media
wpv.co.za
balmorallaw.ca
balmorallaw.ca
sculpit.media
arbitragers.ca
mansion.vc
balmorallaw.ca
starband.ca
investmentopportunities.org
playgolf.club
investmentopportunities.org
techozen.org
sculpit.media
advocates.club
austinprp.org
gooseandmaple.ca
fifa.fund
cars101.life
leaselock.ca
diamantes.ca
goldenoldies.ca
leaselock.ca
leaselock.ca
allanblock.asia
sculpit.media
investmentopportunities.org
balmorallaw.ca
rezeptfrei-sicher.de
sculpit.media
invoice.vc
lindelllegalfund.org
lease.club
lease.club
leaselock.ca
advocates.club
investmentopportunities.org

Certificate

The complete raw certificate details for investmentopportunities.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/+KPDQ566UwahRCT/iT
j9tDWDgIlWiayxYLDDjTUvkJBlbnZGnNbl7oFo6DJEWxxgjRMOaZemy4weMcOcP2
e7c2Azqeti+sYhzLSGiVwwAeUwEs7+AvXCcVnRgxjcEcouYp6K6Q/DI59afdrOTU
N8JBisMEWBMgALasBEyBhRaHtLMquvBnho30LoICly+JsjU7lMmhuYiJrtq8by4b
xZCyuQwl4xq/GAo0aFDvL86oWuYTiOAXabCuYaXpB7cBLR+R2K2Fnl5sN9W8gijZ
Q4otlURYDXqvJc8gV6+xdvkYTzc+OdMah3g5tOj2ZXOr9APvQHEvlNNXIWLI26de
AwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 302286780606210462913252987484531329641393
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-18 16:23:53 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-17 16:23:52 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'investmentopportunities.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21207808390543533637874453591524268186204234487659803351422543843180922220033407894608866841756305638413672019956307048463332501869608650348012289186472204667713976990564146031609191155057131608094095581077483068743191797838420292143839829389274234009072916965971022893448558356106927810109810479597687886802967995083728747338988981312187711104758018979022607769613414070137366795715494285343265566643636280230160294079897363409606201939360188114499720569989726977667037676137431819258931283700415413156133366444567302815199342309626070815803154890412415438631116250536303453099729434072533131472206800690855604084227
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e804f1e202dbdcf750a33709de97497e21348721
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (294 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adultsocialcare.com.highscale.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anabolicsforum.com.texaswomenslinks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enerpactoolgroup.co.uk.twospiesreport.com.sangy.art'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'finewinestore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'historicwhitepinevillage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investmentopportunities.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maakali.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mep-properties.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'powellcounty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.interviewquestionstoask.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c7df4a0cc000004030046304402206ab1573d97ee7e3ddcf6ec857ca292c9624939fa65f430ca783bb35d08a61645022067d807f5e78239c9e26cc203c5f546ec46acc488479c019a4351d9618c947db1007700a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018c7df4a0ea0000040300483046022100c1cc4fc4fd18d88f72cac5481817a6923332b6086804a331ec5737e658705b9a022100a5e7974bcebfc27d42a147555ec26684775536038e24065d7e4d1464205dbe56
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		009dc4f958ddcab2a768e95e51e1a8ae7ed52c41c6ed4c3c9f8c768a1b2a482492006ec3094168999fbcc94aaffcf6f7f4193b4994f08eb7d8d7f3586dbc2e7b259467f174960735cb6620a724a26a31beb3325f8022c0b28d0d55de4f28343fcbd081cd76292e080985d2ded8b847caee896bebf3d80a441f9e9941c48e24d6f6b2c3fb99e9e32c7378e9545a304267402c099cbf2c507e8871e873d85ea68a6b057b9c553a293d52a177ccb5ef373e5ff6ed048b9e8eff7fae4abb2daead34c15cb198b431462ba4c6907a7b48b1010e59a20afc54d2edd66364b3bfbaad9ce61120ed28ad515c0e9690877940efc4c593c2efe78ce1e4d576c1c25f64f6a4ed