homeschooltestprep.org

Issued by R3

About this certificate

This digital certificate with serial number 04:21:97:02:3b:7c:81:24:6d:69:a5:ef:02:96:f0:ab:a6:fa was issued on by Let's Encrypt.

With 24 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=homeschooltestprep.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:21:97:02:3b:7c:81:24:6d:69:a5:ef:02:96:f0:ab:a6:fa
Serial Number (int): 359879186853915621618751296036390881175290
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: d6:46:3c:3a:17:92:78:c4:b9:6d:95:a9:6f:8b:44:21:d9:57:c4:bc
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 75:e2:79:24:3c:3c:0b:b9:8f:73:df:a8:23:03:7d:80:86:3e:fb:e8
Fingerprint (sha256): 49:35:f4:80:03:b3:52:29:5c:c3:e0:70:be:bf:60:e3:90:f8:82:e8:3a:fb:4a:c7:04:a1:41:b7:6d:9e:52:49

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate homeschooltestprep.org

24

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for homeschooltestprep.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

accessmasters.com
americangov.com
anagay.com
askbraden.com
ccrdiver.com
chainreactionbike.com
doorguys.co
duplexguy.com
getition.com
gk2.in
greatercincinnativideoproduction.com
homeschoolrefugees.org
homeschooltestprep.org
hospitalitytwo.com
instagram.allyskinbar.com
ismykioskonline.com
ownwaterfront.com
pressurewasherpoinciana.com
tailgatingsnacks.com
theurbanchristian.com
wildbreed.co
wordofgod.info
worldgoldbullionprices.com
www.unsugaryourmind.com

Other certificates including the domain name homeschooltestprep.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for homeschooltestprep.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7mUStxLMFkwc5LJivsS6
me1obL4TjQmlHuBHpAoEOvB+d3rx3GXAoli8zawIOHFwe/tWBd2TgPPQ6oEN0zqp
up1oUcwMBtVCOw2Fj38069kV2e/pbgbh3X9X7c+WXZKmX6E5rMY3sih/M1tPqKLG
8ZoOUVZbtK89AP53obXjGcKox2MmPWLJ/Cu9TgQuZvRtT6+KogNRSrGdh1s69qaE
K3M9KFjPng/JaR1wnT4auc1q/l0R1tbST6DkUeis4qOC8Hmcg/owjgyKi0WJvTp9
qGK4VI9zINvpNDxKngsCKr/ltgpyuiQzXRn1b8+fMBtdo8i+cRMBBRZnuFRuQLBF
JQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 359879186853915621618751296036390881175290
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-15 16:35:57 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-14 16:35:56 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'homeschooltestprep.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30094557588079836822314269937973318599779563929648148439909648631323183792597985165471925986312013453993469333544945219696590141101384970374461335496286142495471309072349499274652508663741413020585735009867319715194030938124604239095241579252338864688331931541582569999838057672788150757516067657078314307119720495006358314046548486534082844440948458627902993580130398496194370309845800210538414360164072365646858352161403359731204267056306989217035505280009450554072175614617156854411358503552853073364441344697340741782122068950368945065896768752421809363653160879970713728734739184238186740180461036252529735779621
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d6463c3a179278c4b96d95a96f8b4421d957c4bc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (484 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accessmasters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'americangov.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anagay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'askbraden.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccrdiver.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chainreactionbike.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doorguys.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'duplexguy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getition.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gk2.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greatercincinnativideoproduction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homeschoolrefugees.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homeschooltestprep.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hospitalitytwo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'instagram.allyskinbar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ismykioskonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ownwaterfront.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pressurewasherpoinciana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tailgatingsnacks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theurbanchristian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wildbreed.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wordofgod.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'worldgoldbullionprices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unsugaryourmind.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018ee2d474800000040300473045022100ef2dcc7aab3bb1adf0a7ddc286e1f7e374701617d11077d995b1f349a30c6e6302205d1b1407c0c6e66aa98b3b969c6f56c5d4838c75fc1c3a592e7965e367bb127a0075001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca0000018ee2d4752e000004030046304402200a89ef5e11a9ac98382d719b8914c0e60dc0a5c764c6f2992a36efcc8449ee83022063a9b266e13401c3ab101514cb9174f977842404bd9910aca2ee67534c0419ce
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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