www.academic-resources.com

Issued by R3

About this certificate

This digital certificate with serial number 04:77:18:1a:00:2d:25:ea:58:2f:bf:a0:40:7b:d5:3b:27:c9 was issued on by Let's Encrypt.

With 30 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.academic-resources.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:77:18:1a:00:2d:25:ea:58:2f:bf:a0:40:7b:d5:3b:27:c9
Serial Number (int): 388974781865826825188701339810692777846729
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: f9:a0:da:b4:6e:0c:e3:39:68:e5:a7:1f:b3:f8:1a:7e:c2:8c:fd:b5
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): be:8f:ea:06:64:66:9a:f3:e5:82:39:f4:cc:d6:4f:19:06:48:d6:b1
Fingerprint (sha256): 57:12:58:a5:f0:21:ec:9d:cf:a6:13:9d:13:fa:81:c4:c3:6f:34:5d:e9:d7:6a:a4:7c:1c:db:b4:ae:88:95:94

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.academic-resources.com

30

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.academic-resources.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

academic-resources.com
allamericantobacco.com
citimen.com
custompoolcue.com
hfqstudio.com
highconfidencecoach.com
jarvinenhobbs.com
lesmusiciens.com
peachphoto.com
socalparkofficials.com
targetaleads.com
worldwarxr.com
www.academic-resources.com
www.allamericantobacco.com
www.citimen.com
www.custompoolcue.com
www.hfqstudio.com
www.highconfidencecoach.com
www.jarvinenhobbs.com
www.lesmusiciens.com
www.peachphoto.com
www.socalparkofficials.com
www.targetaleads.com
www.worldwarxr.com
www.xn--4dbildbr.com
www.xn--4dbioaox2ar.com
www.xn--5dbol.com
xn--4dbildbr.com
xn--4dbioaox2ar.com
xn--5dbol.com

Other certificates including the domain name academic-resources.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.academic-resources.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2cq84OJRXjmMT0wXp6ZI
fGD+JKB7SqkjTEHtSwyxTBYa6yQ3raSmf/+7oaU52zpt/41idWU3bSvwipgEtNWt
OBsm8gV+OkXDstc3GiwBSLJwxzsCsioMFtv7w/GX89PYlEw/nUEl3Rp73GtAthXO
ESA0jFDR2nNB1YgqdwxEIYMbCy1Rkb+qz7BKf/uuiTtYSSdENa1hxCZGKDYDIl90
iiPyB1R6FxaFN7FvZ9GnBCHV46OyLOysyJyHoOs5TUJ8lZc6UvFl7yEjvvC2UQwX
nlpcebPlIaBOeMzbX6uZjHSX27CCMX8+IBlfofOFSkLZOfmy2JDMEQmjMmiRaSWp
ZwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 388974781865826825188701339810692777846729
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-13 17:06:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-11 17:06:24 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.academic-resources.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27493685916071589342220024428481900194317134707990326583747731172021907596335271602313241331658726799619537028055477686649388754751071059958420893913758091591877467216477882376616978631963629264568827095391710418681015755351730860694035258709616323253218003675828844465317148977580409732802328269367186409642114036562305555364450295100898431122969639294085456457031659777875657509109344015320538675275329390716777066922886163532738246447600089602040650075628209432816152224530818994649773918902489223614471940886816283689563093134971741681218593651889884993102637827085719834103756687717087159908539041144314647652711
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f9a0dab46e0ce33968e5a71fb3f81a7ec28cfdb5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (634 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'academic-resources.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allamericantobacco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'citimen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'custompoolcue.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hfqstudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highconfidencecoach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jarvinenhobbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lesmusiciens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peachphoto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'socalparkofficials.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'targetaleads.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'worldwarxr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.academic-resources.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.allamericantobacco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.citimen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.custompoolcue.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hfqstudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.highconfidencecoach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jarvinenhobbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lesmusiciens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.peachphoto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.socalparkofficials.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.targetaleads.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.worldwarxr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--4dbildbr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--4dbioaox2ar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--5dbol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--4dbildbr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--4dbioaox2ar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--5dbol.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000189506ecbb600000403004730450221009f799e3859d2d78f3c59270221656cda4ad7c7cdf953db58ac3b57d82d24bae002201656fa44f68361106e167304ac8ea23bacd396ef8ee91918058f7d2a097d9e09007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000189506ecbc00000040300463044022062a050a479bf7d2d2717258bf947d9e27bce206bfeb4be93f3e9363b4d7eb7f6022035253481f601f094ab18aee759a69a7d544dc1bf3a7d0446363a6e851f5d80ab
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		003ede2ddae57c9a60a5e31d09d784165c2869393cebe8aa65cc50d9901bddbd2fecb8a1ec958ea15d3038fc528f35bb0806319c9717d043067e05d37b354e925f93a184858e7b9c17e020512623c374f768136de0ad8e878f9ab0bf75c1dfbf74bb7efa8ae05d2ddcbf38436036b376a6e4ddf60ff8a09fe842c296f89af112584e54941cee9d399a43d29bae1149098a4fe42a49bd4098a6bbe0ea254a3f6711f718e14d94db47aba37017c195bb1434983bef27742996f93b045b7c726e0f7541ba3bd1879d8c7ace7a7e8f3b342b550f7ae47b376899c9d1f8515af67ecf461ff183694d65d9f7163fc08d19a7d452f5919ce2a37c704adf41c6f0e7505545