*.cambridgewomenscommission.org

Issued by R3

About this certificate

This digital certificate with serial number 04:19:58:fb:15:79:94:ae:73:79:dd:5f:b1:bb:42:d6:62:86 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=*.cambridgewomenscommission.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:19:58:fb:15:79:94:ae:73:79:dd:5f:b1:bb:42:d6:62:86
Serial Number (int): 357074478665768237032407648365917983105670
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 85:79:e3:fa:6e:ed:5a:e3:e2:96:b5:f2:5f:1c:09:68:0c:eb:68:78
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 2e:47:7b:58:0e:5f:6a:4a:31:0e:5c:74:f1:b8:ab:7f:bb:3c:0b:77
Fingerprint (sha256): 5b:75:07:a2:e7:e8:38:d4:8b:3d:d3:a6:a3:6f:ec:f8:a6:2a:33:08:7b:06:36:85:f2:1f:af:48:d3:d9:8e:ae

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate *.cambridgewomenscommission.org

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.cambridgewomenscommission.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.cambridgewomenscommission.org
cambridgewomenscommission.org

Other certificates including the domain name cambridgewomenscommission.org

(limited to 100 certificates)
lists.byronbible.org
*.michelworks.com
web01.tigertech.net
*.brandinmotion.co.uk
lists.nikibikidress.com
customers.tigertech.net
lists.cafebacchus.net
customers.tigertech.net
*.michelworks.com
*.gtphisigmakappa.com
*.jimwitty.com
*.jimwitty.com
web01.tigertech.net
web01.tigertech.net
lists.brookfieldfarm.com
lists.bigteezesalon.com
web01.tigertech.net
lists.cafebacchus.net
lists.brookfieldfarm.com
web01.tigertech.net
lists.0100101110101101.org
*.michelworks.com
*.michelworks.com
customers.tigertech.net
lists.swimkingpools.com
lists.bwajakarta.org
lists.dhaudioandhometheater.com
*.cambridgewomenscommission.org
lists.bigteezesalon.com
*.jimwitty.com
customers.tigertech.net
lists.brookfieldfarm.com
web01.tigertech.net
lists.cambridgewomenscommission.org
*.michelworks.com
lists.upsstorage.com
*.jimwitty.com
customers.tigertech.net
customers.tigertech.net
customers.tigertech.net
web01.tigertech.net
*.jimwitty.com
lists.byronbible.org
*.michelworks.com
lists.byronbible.org
lists.rasterms.com
lists.byronbible.org
customers.tigertech.net
lists.iafflocal5031.org
lists.inuverse.com
customers.tigertech.net
*.michelworks.com
customers.tigertech.net
*.michelworks.com
lists.brookfieldfarm.com

Certificate

The complete raw certificate details for *.cambridgewomenscommission.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyBj+5gue8PSIar8IuxX1
LQu3gdlTb3ts16AMjWseeZ4qo3/QwCcfM+fkmP+8z63Q6gTwce94CcrdtqITiWaB
C07teFO/23pH4dyL4PJ70urd7ecsl8CovSh4t9AzdJRZiuw86G56tp5dk/lwHuAU
EXAwUe20zTzGectSpbekmPThkL02eXclwLQ30JzM2ncxKjjlQVTygE9OWHyKwq7S
BxP71GPxB14jaySMH1wZn8DVIe6Au0KCzAExSuPkToGlss3TWvBPqgn0ML3l+ABS
1hdlpPqKkrv6Ix+gRb14nKRNOt/GklivgIK2xBKRmMdwOahgYW8ojFzbiWxsueqp
xwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 357074478665768237032407648365917983105670
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-02 07:14:56 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-31 07:14:55 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.cambridgewomenscommission.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25259986831144838727522894721505531762147555407244501803485143888097852849351081593933805912450002410825895025448407715489100206655883484412794796368416017812762821046345065842353602738619777585286157045937228272073962984846190344914683818037940163075467315176287836351172099251557623709166300198653029540406621404287570217988871538832325078736559814334041570726036294078659351016563904385914302522565272021639520372832891520701140934326618236233834029275795023304866368422118392003152535812602291558255335167781591788090052858263801272708067268867917027331130215723425943048683130334465915643215951434060961583638983
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8579e3fa6eed5ae3e296b5f25f1c09680ceb6878
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cambridgewomenscommission.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cambridgewomenscommission.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018b8f1985820000040300483046022100aad6b40803f4edb163106f196048fe146ec0ae5e34d91f9a4066e22d25b50fb1022100c349d99aea9d6bf5b45b3314d07b13527aeadd1ae37e80d8706c481ada78f88200760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018b8f1985af00000403004730450220533ee9396d2371b8945242b2bcebd3fe84062b455ba0bcd21a532349f35bf82502210090b9618fdcad975a8b3a3b1bd3467245c93d028521a13093757442de7bfe10dd
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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