www.exap.org

Issued by R3

About this certificate

This digital certificate with serial number 03:b6:43:84:62:3f:d2:13:79:fc:a5:42:ac:d4:b0:c1:ad:2d was issued on by Let's Encrypt.

With 30 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.exap.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b6:43:84:62:3f:d2:13:79:fc:a5:42:ac:d4:b0:c1:ad:2d
Serial Number (int): 323357994226526987044919640320540556766509
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2d:dd:65:cd:de:8a:42:86:23:5f:b9:2a:6b:fd:06:6e:fe:64:51:a5
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): bd:b6:06:54:c7:35:18:eb:2b:ef:70:d5:3a:f5:b3:ad:33:d0:c1:e9
Fingerprint (sha256): 5b:b6:c6:d5:3e:9a:bd:9a:5d:23:36:13:74:22:a8:d1:5d:e1:cb:a4:be:e6:be:ad:1d:5b:dd:2a:36:00:c1:29

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.exap.org

30

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.exap.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

apexschoolofgovernment.org
degusa.com
dolstra.com
exap.org
hillsboroughcalifornia.com
hotelviennaaustria.com
legalassistant.ca
margilla.com
nowmanga.com
pphost247.com
rosdavidson.org
schoolsinghana.com
sellmyhouseinpennsylvania.com
sparkly.store
weaponizationofgovernmentagainstthepeople.org
www.apexschoolofgovernment.org
www.degusa.com
www.dolstra.com
www.exap.org
www.hillsboroughcalifornia.com
www.hotelviennaaustria.com
www.legalassistant.ca
www.margilla.com
www.nowmanga.com
www.pphost247.com
www.rosdavidson.org
www.schoolsinghana.com
www.sellmyhouseinpennsylvania.com
www.sparkly.store
www.weaponizationofgovernmentagainstthepeople.org

Other certificates including the domain name exap.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.exap.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5wja2QT1tNZxFnM2X9p
l3nlKLXt+vmMHwOLCyUX2y8e6V7U3SKp8c3l8azuO5k7EGQQueOE8TwG+yI2uKBB
20Nzybkzw2xOu/L3sQO7GTHeJcqpl4/+g90kC2eTahWBg7fY6LdzLyv3SkfoIMF7
ajZvqNlYVmMjWrihdloI9GZz6H+uSaYi6dnEaJhUZyBcUSv5CLT+txm7j4+Xed2a
l7ixlqjLmoyDrMsJCpd8xdFxOL2jMOcgp62JKqHveFaQHWTb46URpjDkx2/2gxKe
HvOlN4i+ltfEjZLLtqA53WB32CNt7Qzl3WbWihLfMKXL9sD+rwXFuOs26Gy+65J4
kQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 323357994226526987044919640320540556766509
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-12 19:33:47 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-10 19:33:46 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.exap.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23178604502456917912102421218042652173340205427482509737480389105045456165892830757770235888746630362895058648400607162892842658971907679366988820315465668837924417592811371968522161746299815616171295023248792583216983806535784839349601041586620103379577121611263433810114195168133647754217123719154602670950696675764392327347381516928112030980479658965176958481813863772942062059499508616946334021230385838998246235841766277319835024319098824491959351193818234792829624640968221397421965433912538925316986867789596619793673260982617941426618443121013678556785303922298131504340944812719924262260857201135532750567569
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2ddd65cdde8a4286235fb92a6bfd066efe6451a5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (678 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apexschoolofgovernment.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'degusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dolstra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hillsboroughcalifornia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hotelviennaaustria.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legalassistant.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'margilla.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nowmanga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pphost247.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rosdavidson.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schoolsinghana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sellmyhouseinpennsylvania.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sparkly.store'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weaponizationofgovernmentagainstthepeople.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.apexschoolofgovernment.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.degusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dolstra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.exap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hillsboroughcalifornia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hotelviennaaustria.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.legalassistant.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.margilla.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nowmanga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pphost247.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rosdavidson.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.schoolsinghana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sellmyhouseinpennsylvania.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sparkly.store'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.weaponizationofgovernmentagainstthepeople.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee0075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb52000001894bcf596e000004030046304402204f68901ca2b8bd801e21d8e9b8f2cd85a3d12b073c4d5ef4cd5ee57daef716880220404999f9deb247f645a56f4576453c57b3cfd93c8ddae1f0baf2414554674ea2007500adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a000001894bcf59b0000004030046304402204bf293c56e50d4ce769882b64dc980b6dcbb78651ef690930eb000f6cd37fe72022061d5a2c3dbfd12928e4075deae12bc3a06e689efeb407dc5f40e6e7dccfb17e6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		009839bf4e51e005ec1e4d498cfd037aee93059e23018fb96108fc75b01d4b0f781bedd68ff3916e3cb2a5a11e6cfec39e08d4edd9a38aa7e953fb5bfaf08ac5184c5eed2cb54021628a72a8417ac3170589f3d1ff9899b674dfb77c9dc1c0b3b1af4cb2fbb7cab992e21909c2b805f4bd3c69aa6c70b49ea3825a166521bc262decccefddb9528a01d0ee0108ecf25ab5c034cf1f83a434fbe7ca4699f97508a766cbf37421bb9dc44b8499b199e380d863b8b83cf82d74b86326492072d56da1475c88ba90d70a13a476c15a20092fb267dadbbe4af27957803b0a9fad13b46ddf106a4b149bb9726f47b91fe6a41476bee649262ef913be16129398ee2136b9