citizensdeservethetruth.com

Issued by R3

About this certificate

This digital certificate with serial number 04:88:23:69:98:cb:90:5b:dc:99:89:dd:e8:eb:72:f7:81:ac was issued on by Let's Encrypt.

With 9 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=citizensdeservethetruth.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:88:23:69:98:cb:90:5b:dc:99:89:dd:e8:eb:72:f7:81:ac
Serial Number (int): 394774616898365489470833509589748890960300
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 08:4c:9e:52:a5:ad:3a:11:03:85:2f:ad:ff:62:ff:50:82:d3:41:5d
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 03:be:68:de:a3:ca:0b:db:6b:03:83:fe:f6:03:c7:ac:b5:04:75:86
Fingerprint (sha256): 48:86:46:6a:3d:05:cf:0f:00:e8:b6:a2:13:c2:e0:f7:c8:84:6f:08:89:7f:0a:43:72:54:1e:33:a5:60:9c:d9

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate citizensdeservethetruth.com

9

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for citizensdeservethetruth.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

arbitragehacker.com
cannabisheads.com.realestateconsumernews.com
chicagodivorcehelp.com
citizensdeservethetruth.com
dumptruckowners.com
huachobasket.com.usacommercialappraiser.com
kultovar.com.boquetekosher.com
sacstables.com
westhavenbankruptcyattorney.com

Other certificates including the domain name citizensdeservethetruth.com

(limited to 100 certificates)
peoplebee.com
xsmotorcycleschool.co.uk
citizensdeservethetruth.com
preceptscommentary.org

Certificate

The complete raw certificate details for citizensdeservethetruth.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA22GylKGIYNlU1d54hYrN
9zBIeCaZcyPqXdYQMCYu/dD4hcBh+KLLJbO2C4sTJ8iDFSSiiyIU/hmMFpdOuCmM
35cE0Y5O7pZPezqBPqhIcIaQAnle4KTlTS6g+LjTE94WKu4RgtFXYGAn1wP7v9av
0lLPf5Hep9egoYoECJ0FkhBkRosSmzBHK2DO/fgHVYx6n0MWrHxSOlNqkBXmoZgQ
9FgPBarbDO+x8jhwlZOd553xZmemwMIvD4JzXRJNnujcY5fToQGdsfeDgAZhuFVs
vCsS88KI3zY0HN/eUxJn3o7Y0BMYZX1WosKJysWy8S5VL9iJXKaBQK9/cx0iWUeq
+QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 394774616898365489470833509589748890960300
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-30 22:44:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-28 22:44:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'citizensdeservethetruth.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27694365260038038511659216049421348078101217914811222995168457745617399813350234638964028373230112827201873742922577468047042689788444291195067999736226860794726757253686860655925179853281482594932152669499761838915274358964993814446957552627379011046883736140171101570984998288874011397295689625822838516785325806157346871315410381456373687308956943989437612326244123922431682015305317472691882291647293879587634589458539229442518368655647470171289195615984240209006018276443671370334434798611546621231490375246126565921022316594939835692989891146618121853214915396118492848774984890766792606620962068622375209380601
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							084c9e52a5ad3a1103852fadff62ff5082d3415d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (271 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arbitragehacker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cannabisheads.com.realestateconsumernews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chicagodivorcehelp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'citizensdeservethetruth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dumptruckowners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'huachobasket.com.usacommercialappraiser.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kultovar.com.boquetekosher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sacstables.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'westhavenbankruptcyattorney.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018734e88f8d0000040300483046022100fee3b1d4c9101a0f4b50a73f45b8e8399b59734e21b31d33a0188c504a308cac0221009b511550a418a2f9fcffb59628e0cf8ecff9eaa4a3fdab4b590ffd8e32e73de1007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018734e88f82000004030047304502204d9c125e7e9dc79af29b63beacdb66cebd7f4e5beb3f5f5ea6bc1039954c61b2022100baf88f13d0abaf08d42fd5f548309a0a56b6b84427752a8c58552eca6da58405
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		004645bcd32da781de14b7a4303d5b4445aa20621347cfbb23c1334f8ad0c7d2706495ac0f7acd4dc3d57cb3f6c3984bf89c429ae09fa970ee75ca8ebaf6a8a3ce7b6000af2135d6a30c90a660b993ae8f92c55a8ae21c03688893c67be20c86f69ef86b04771dd5a81993cbcff6b3dabcb41e5a23cc85432c8c36e78fb62a94d04d99a0a4e636086afe1ef67981fe802eceb4b8894aa96b5bce294f0823d38e4fcbc0cc05ea03f4585aa9ed81157c86b3703ad6dc3bf6bfc2f69cf60e3f6b981a339e5bb6bc8e15fc42c436d7f54dbdf03873b4ea99def9115d46c3a41ad77afa1a36b72eda9a3b9342ca18c2d23cea81865f8d63290858a30b83b14fcdf7cb5f