fix2020first.org

Issued by R3

About this certificate

This digital certificate with serial number 03:69:3e:e3:48:18:cb:8d:5d:33:28:de:02:2f:9c:ee:a8:d0 was issued on by Let's Encrypt.

With 11 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=fix2020first.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:69:3e:e3:48:18:cb:8d:5d:33:28:de:02:2f:9c:ee:a8:d0
Serial Number (int): 297150098571402794512438469734695732947152
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 3a:89:98:aa:1a:b5:8a:10:ee:1c:23:0b:22:df:af:24:c2:97:1c:13
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 8c:cc:ac:e3:5e:8c:5f:33:28:b7:23:55:85:4b:b7:03:f3:c4:e3:aa
Fingerprint (sha256): 5b:11:81:6d:5f:0d:ff:c8:6a:e4:d4:9c:8a:6a:a1:99:e8:37:c4:39:92:8f:92:df:1e:ad:93:fc:05:f5:b9:07

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate fix2020first.org

11

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for fix2020first.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

craigslistrealtor.com
eph28.com
fix2020first.org
lgbtqvietnam.com
namingcreator.com
peaksign.info
pussys.net
smart-moms.com
turntablebelts.info
urbanministriesinc.com
wholesalegoldandsilver.net

Other certificates including the domain name fix2020first.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for fix2020first.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmwYHuNXyTCdH9QEDDtDY
8zaJ7ZohlJl4diGgbpMBO3qrQxEW5LzuI3nP2J59pEmZ7PJ70WkA6H/iyGg4j5Np
ItyCguUPiEHOsS2mBeeuOUxdhfbnd2woyMFuoehpWB0l04CKKvFerBnoVw+232XD
RfATHmQO6f5F9BLk4PMHn+CEJKpTPCQg/7ZIxwKxCOP3yPYVibQNCwes6FHJ5FYM
zcDIL4mcGrUlIdTJZfG0NPY1psD0egituBFmtEV51GVGVW68HKRiMjTnOEvpK4uc
PHwUq9JQqy6GAHTL5I+7sIEj5X6LKI9G1AAepS557DTN9ArLRvmOy9CkWn77VB0q
YwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 297150098571402794512438469734695732947152
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-16 20:45:37 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-15 20:45:36 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fix2020first.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19569910854493379732052486003686847612980481927022039182338471094134039210233381423152682905317401544759883575825584075306469195172553528889319636628600146144353549656438010654503433377394290152709840836961798219081478960333770955817434841815065603361506897461540914729608766422856441468134754307322577035742102166909756256178123486881952488336682604252784057924402495760330558887618166454854262254657343069672398645633407433586203740240640067019922208314540116038554535047906307526292081464952224302133695852477624567219164923680430941078723342460808780867943371376858548159130822370330379340948754940918672335383139
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3a8998aa1ab58a10ee1c230b22dfaf24c2971c13
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (208 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'craigslistrealtor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eph28.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fix2020first.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lgbtqvietnam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'namingcreator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peaksign.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pussys.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smart-moms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'turntablebelts.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'urbanministriesinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wholesalegoldandsilver.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018ee8df61f70000040300473045022100e932a044d769b5a806dcc44a13d04758ef85c8e0149f0a22c9109ef4342dc09502201d48431c3043e8c9e55de6136efe7414da67614fe5fe3566279da6c75d489f62007500dfe156ebaa05afb59c0f86718da8c0324eae56d96ea7f5a56a01d1c13bbe525c0000018ee8df62b6000004030046304402200331f056e70b3ad95ca0254fb6e3bd3ff8098d14daccb9499f91e70a82b6b3cc02205ebfcb54de385a00a0cc8d1de5323b08af7e1dd034acfabeb856185cc1cf73fb
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		006ca2948e8dd029bd6ebefe459151185e820854cbd1c78abd29814260ff6b300c287dcb8f8f31a818768fba59e806289759e1ef7316b83dddfe35f00831d7f38ce39fd1dc17c4cf7f832b42ccbe0a57bf3ecc78d7fa8312423c65af44dc2a76dcfe1a7385ad7d8c1dbc955349c38d7fa6558dffccf612d5e668fd046b4a87a8ba3a66ce07bda432306149d6f3406178fd881c96d082c64a33fa4f39fbd204cf3dfc3a0f71575abfed4689cbcc0de68b51981eff3345dec3ab59e9a7cb2ea39f3d6576374b82269be5341256e983fa238c36624f4a238a988a12f1633b91b7379144caee4fb2c3ff25d5386311cc74c53c3aaebbc719a0d45aaa5a1aed61142c35