aacconservation.org

Issued by R3

About this certificate

This digital certificate with serial number 04:31:99:d0:87:03:71:16:84:15:80:25:fc:3b:9b:00:67:6f was issued on by Let's Encrypt.

With 17 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=aacconservation.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:31:99:d0:87:03:71:16:84:15:80:25:fc:3b:9b:00:67:6f
Serial Number (int): 365327434325666618675647105786298956277615
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 0b:ac:15:2b:6e:39:55:4f:22:51:28:bc:8d:b7:df:2d:b5:a8:ad:5c
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 8f:d0:22:b5:4b:ec:36:7d:b4:b8:df:87:09:4f:89:90:83:d0:a2:4e
Fingerprint (sha256): 4b:02:74:60:59:00:f1:5a:67:44:91:69:35:6d:5f:3a:ac:71:c4:e0:b3:6c:d4:38:f3:cd:cc:a0:22:87:df:0f

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate aacconservation.org

17

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for aacconservation.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aacconservation.org
diyblogs.com
flyresponsibly.com
greenafricaproject.com
internationalworshipcenter.com
kaellyn.com
m-j.in
minthillproperties.com
morethanjustapatch.com
raaaaaaaandy.com
sellfor1dollar.com
shinewindowcleaning.com
sledads.com
stoneoakmedical.com
usdaprimemeat.com
www.treasuredpastgen.com
yonkerslawyers.com

Other certificates including the domain name aacconservation.org

(limited to 100 certificates)
thrill.vc
aacconservation.org
systemengineer.cloud
aacconservation.org
aacconservation.org
crosscheckusa.org
pointqscoin.com.aacconservation.org
exchangedchurch.org
aacconservation.org
blood.vc
freedomap.ca
leadership.bible
aacconservation.org
f1xed.com.hydratight.ca
69er.love

Certificate

The complete raw certificate details for aacconservation.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUaITgZJpRRg18EjePX0
FZKOv5zCnKZR+EMD+Atvx6x0znwB0NLCPlcLXXZc4ZXrRz7dRpAG9DnUqIbkZE6o
DFGZ4cInBJWFUk2LaNeoNCweH27NZQtvY1vhuZfHA9cwpf7yHsVfZ1Dx/U4L/pi2
u2++lgVA9Zyl1lxEOPSDWk1znqUdtTuC4LxfSPjuBgJhM4VB6OdNa1W56iePXSf4
cWxaZplkfrPJV7lU8EF1+LjT7EA8dJJitrOjb9IzAZ+t2SJLnvX8k0mHuDCIl7v9
6RwZHse/ElZaDR7kKzeJPAF4WYeqb7pBOryyq6b0ypqURr2GTe1HowJ1vmM0WSzM
EwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 365327434325666618675647105786298956277615
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-26 17:11:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-25 17:11:14 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aacconservation.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22378960821732431886392342139974796801913835632343739544401295937059994571925246327824244823534942744452325369900442746000596148092264673823346975520249850313871679682648693199067281849151273699765840550441448786975057702497091297388358014026748160502132914819441631161488557701884938195260611438721029926215802183487411041982449734791189554598693249683674577745651429729046254748422884818254963532146811905205385923278542242492054959124739539807372400194520480292473990127093460126273207170529366754376623817498067742171467201076714120425170957670282926998343841500516779623624711241313294873891662792652659582880787
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0bac152b6e39554f225128bc8db7df2db5a8ad5c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (346 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aacconservation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diyblogs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyresponsibly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greenafricaproject.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'internationalworshipcenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kaellyn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm-j.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'minthillproperties.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'morethanjustapatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'raaaaaaaandy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sellfor1dollar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shinewindowcleaning.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sledads.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stoneoakmedical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usdaprimemeat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.treasuredpastgen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yonkerslawyers.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018f1b9aba7a00000403004730450220386c6d6a9e0ad6c271e57ad63cb2176a48a330a6dda6be6105d43d7e64e66473022100b1ad03d697f4d6cdc15c54306e4041b5debb97ae97042387813a2b269370863800750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018f1b9abaa700000403004630440220718a850ed1b4f19d85b6b6facd45da35af7f6024b4e11d0470c4bea0f8e76a87022040b1e977631b9305c6d5e3c5b75ba3dfee4ddb31fd1e0daf1aed88289fa944a5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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