alliancedefendingfreedom.org

Issued by R3

About this certificate

This digital certificate with serial number 03:40:84:92:f3:83:79:1c:a6:57:b4:82:fe:b2:6e:03:f6:c4 was issued on by Let's Encrypt.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=alliancedefendingfreedom.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:40:84:92:f3:83:79:1c:a6:57:b4:82:fe:b2:6e:03:f6:c4
Serial Number (int): 283291150388047661879951324704011073091268
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 9b:c9:49:b5:3f:5f:89:e4:2e:6f:1e:00:bc:a5:dd:c7:13:99:78:44
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): e0:bc:45:b5:57:ce:6b:cf:6a:a9:46:39:b3:7a:0c:25:d0:a8:90:e6
Fingerprint (sha256): 47:89:f4:42:7f:5b:fa:ce:41:be:0d:ba:88:8d:70:9b:c1:49:4c:c6:f3:d5:e8:5e:4b:37:02:c7:3d:9b:4c:ab

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate alliancedefendingfreedom.org

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for alliancedefendingfreedom.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

alliancedefendingfreedom.org
blive.co
bottomlineprogram.com
cialis5mgfiyati.com.pwcloans.com.quintoquarto.com
escuelasa.com.britcoinwallet.co.uk
whitehousevideos.com

Other certificates including the domain name alliancedefendingfreedom.org

(limited to 100 certificates)
*.alliancedefendingfreedom.org
alliancedefendingfreedom.org
mail.alliancedefendingfreedom.org
alliancedefendingfreedom.org
alliancedefendingfreedom.org
alliancedefendingfreedom.org
*.alliancedefendingfreedom.org
secure.alliancedefendingfreedom.org
alliancedefendingfreedom.org
alliancedefendingfreedom.org
alliancedefendingfreedom.org
*.alliancedefendingfreedom.org
alliancedefendingfreedom.org
alliancedefendingfreedom.org
mail.alliancedefendingfreedom.org
secure.alliancedefendingfreedom.org
*.alliancedefendingfreedom.org
*.alliancedefendingfreedom.org
secure.alliancedefendingfreedom.org
alliancedefendingfreedom.org
www.alliancedefendingfreedom.org
*.alliancedefendingfreedom.org
alliancedefendingfreedom.org
NLA.alliancedefendingfreedom.org
secure.alliancedefendingfreedom.org
*.alliancedefendingfreedom.org
sv-trc-app02.alliancedefensefund.org
*.alliancedefendingfreedom.org
mail.alliancedefendingfreedom.org
marquee.lighting

Certificate

The complete raw certificate details for alliancedefendingfreedom.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2z0UFmUqIFnhTduNtoBy
093O0pUWJ0HqHu2wOwzo2Wk1LerpNOzqKKswFBqwiMDAUvkSwCo/8T5vp6csrnqg
u27xFcHtxHhij4Ux7/EQU4hWdODGf3TrUorCHhfBXyNoNjXgv/XU6REYgR9V/r83
fMMutf7/9JQzzFGMK2J7E2ACuf+VGf85bajGI5xxwSIxXFncGgaXCBSkUBMpDOpn
mLT9Myd11W3R2WMWFMdWnCqKnXnoMsD1nWHvKaTBWs8ZnDLCTxKnods95m+T60YH
XL1hgOZZTOAP2bju0sxR+hkpTciVjtntd0/Oet/BCCONch68FN3LXZ9VKvSgRUBj
fwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 283291150388047661879951324704011073091268
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-04 13:13:49 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-02 13:13:48 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'alliancedefendingfreedom.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27676307702055382149368056269502254602548315408055637930630579192730731527296907648913582832696831510408170173400614804115515109913725331091014955397285294943079677463664969306638490902226733647211794511094842637320061481792010389082555003537092093599861995124851605995803442704008678978452570598547105090608419032577176455172174506511190273669767409165323489384474305747797155090799379541535211529161343979850624964917438743684933509946112323912058298276408737932371309841673396525650813041225010117413698543478448628474834425535374022466354319185340934997332188257849094290958410884593668164377785048399850596492159
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9bc949b53f5f89e42e6f1e00bca5ddc713997844
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (175 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alliancedefendingfreedom.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blive.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bottomlineprogram.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cialis5mgfiyati.com.pwcloans.com.quintoquarto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'escuelasa.com.britcoinwallet.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whitehousevideos.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000187e71caf5c000004030047304502206af29e682e1cbe8fdd3e9828b52794a697faebc9c3c35934292f24dc6d29437b022100ee6ff679e9078ca46564fa1efbb6931be65a50c2616a6ffbafc3d525a84f8c9f0076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000187e71caf6d0000040300473045022100d19593a054684957a49af7a0be8482e6034c42cda0cb89015fff3cfa32894831022033d0d7b2f0ec24a692a385d3ea8bab0cc429e42fbaa9d94d261269c7ef070db4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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