pureindulgence.org

Issued by R3

About this certificate

This digital certificate with serial number 03:ae:b7:47:27:23:c7:14:92:b7:c0:71:63:bf:fd:e1:46:1d was issued on by Let's Encrypt.

With 16 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=pureindulgence.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:ae:b7:47:27:23:c7:14:92:b7:c0:71:63:bf:fd:e1:46:1d
Serial Number (int): 320789607809678200778742268507833845761565
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ec:f5:b1:56:6e:b4:9f:98:2f:e3:6a:23:8c:29:5e:c0:98:30:e1:e2
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): e2:00:5b:d5:fa:cc:58:96:e2:8d:18:ed:a5:ae:61:a0:94:57:ce:d0
Fingerprint (sha256): 5d:5f:fc:01:bd:a5:26:87:dd:78:45:a1:b8:75:20:7d:70:f3:1a:f4:ee:e2:2f:17:37:a7:67:92:1a:ab:a2:53

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate pureindulgence.org

16

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for pureindulgence.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

50statestrailclub.com
bestcartransporter.com
bestsmartphones.com
diamond4vip.com
erlangerrealestate.com
jenworth.com
jobsluk.com
masterorganizer.com
mattot.com
pehnawa.in
prompttrade.org
pureindulgence.org
show4vip.com
tha.co.in
warehouserealtor.com
wgxi.com

Other certificates including the domain name pureindulgence.org

(limited to 100 certificates)
arbitrage.ag
pureindulgence.org
pureindulgence.org
hairbotox.me
pureindulgence.org
arbitrageurs.vc
onthemarks.ca
pureindulgence.org
pureindulgence.org
pureindulgence.org
onlyyoucandoit.ca
pureindulgence.org
exchanged.media

Certificate

The complete raw certificate details for pureindulgence.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyKvLDXHroQrgx5JDSWR0
mRmTfPid5/coSK9Lr2FGQuZmI+y4xoH8QagL+YtI+zx33xV3UABFNyBuUoWFDBJn
S06CxfZdxSjs/uo93zdP9YqPeH44erj1Ew1uc0XQNk/t1WN0LJrPPH4zI5u7XDGi
xEFzuRrZZzqLJgXMmaizeb7yaX6hB5nZw58UmGXLZdiNdN/nJ7026npO2m22FSSI
XkmmpCjpI1OZyQXWi2ASn0Yl/oEFXlYDzrMzA0hDA4YxRxwy94LszItVp2KIa3S4
LAbtRTIBcxVBRVsVcOq8soddHRIRwrPK8DIQGwqKs8jfFiYKQj+cbP4RP0IDE7aQ
mQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 320789607809678200778742268507833845761565
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-03 23:59:53 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-02 23:59:52 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pureindulgence.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25332375364611866596363175341842526588067100943711047027480861348939923484319677321456181035890939238398154480261054505399170345921486190929761427793689892334978569719319321829603454032707246861137287562467082338181335054798198575765262216221243748017914113390526373103270863383236295171781072520491486915987834027578488529678846563610350175345156814404221297774099106770906292073184186100167632882393564329648553474197280304757176176303881227076617372257347739249757025611052403616403160617519680290748530507667838525452005193036471381350053214463629472718787529491147539000878637012367548410205060193905912193650841
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ecf5b1566eb49f982fe36a238c295ec09830e1e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (279 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '50statestrailclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestcartransporter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestsmartphones.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diamond4vip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'erlangerrealestate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jenworth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobsluk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'masterorganizer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mattot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pehnawa.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prompttrade.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pureindulgence.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'show4vip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tha.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'warehouserealtor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wgxi.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018ea69e92ac000004030046304402200754f219f413a6efd6f84235082305b9bc19a76308177246ff071545918b141b02207f4a7765a48b038acb6132395526c33b82ce675f659600c74a076438321a411e00760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018ea69e92f80000040300473045022061b6d8d3315c8b6d1aba0565100bcc84fc7652a34ffb56caf865ef258e5d60b6022100e5fce938bde910b0ed3fa52a11d897f7fb0ab9154531921a06f1cc8e6cdca18d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		000bddba802fc054f0a1d8224da4fcaa9da7b7ceb2f950114347cb731c86f625223259882cf9aa0447f740c293a8de4e70a8ae2fa3e9f73c7a4454d19263c81b99971c2be3ca0003f4d6b8d6db368fd691042e7cd5e4c98c3bce02d6f5c4e424dfd7fef159311efbdff1bf6f92fc6f3a7ec189921fa3b16e4a7cc82f0f9300f18f1222c35737aebd9942742c4dee363620cf47184fb00ae9aca7bc2d56c5e2068ff51c70efe27d93a927b256f5f252cc91022df0ca89b81cc11063237f9c49a895fe6cd3a842c61c1458596a3a1cbe53110ede4864a6ebd2cde514c66d0340d3bd7360dab96e319b7eee8cd6368037f45dac50e82d7102d246824cdcd853a09cb5