martinomfg.org
Issued by R3
About this certificate
This digital certificate with serial number 04:a7:32:af:e3:66:ba:88:04:02:5f:2e:0e:3c:11:4c:04:89 was issued on by Let's Encrypt.
With 18 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=martinomfg.org
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 04:a7:32:af:e3:66:ba:88:04:02:5f:2e:0e:3c:11:4c:04:89Serial Number (int): 405343673666823180623414944938585347589257
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: d6:99:e4:ce:80:d4:5a:bd:c4:c8:1b:4c:f0:b0:73:65:cd:9d:70:1c
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 57:c4:88:67:c4:67:a6:27:dc:78:12:6d:8d:ce:4e:9f:a4:64:84:3b
Fingerprint (sha256): 5d:e6:40:4e:74:7a:d9:d0:54:b7:65:ca:08:fd:de:6a:93:b8:15:50:82:c5:e0:6a:98:f3:f5:b1:f9:84:af:c3
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate martinomfg.org
18
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for martinomfg.org
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
0800555111.com
albertavaccinepassports.com
appraisalarbitrage.com
beloitfloral.com
bigboardovecesko.com
callowaycounty.com
canibuild.app
chubbyliquidations.com
gacalls.statenationals.us
gpsintegration.com
katalysttrainingsystems.com
lmgstudio.com
martinomfg.org
meatmanranch.com
preciousartgallery.com
shhaadi.com
syllables.io
yetfor.com
albertavaccinepassports.com
appraisalarbitrage.com
beloitfloral.com
bigboardovecesko.com
callowaycounty.com
canibuild.app
chubbyliquidations.com
gacalls.statenationals.us
gpsintegration.com
katalysttrainingsystems.com
lmgstudio.com
martinomfg.org
meatmanranch.com
preciousartgallery.com
shhaadi.com
syllables.io
yetfor.com
Other certificates including the domain name martinomfg.org
(limited to 100 certificates)
Certificate
The complete raw certificate details for martinomfg.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgISBKcyr+NmuogEAl8uDjwRTASJMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDA0MTYwMzMzNDhaFw0yNDA3MTUwMzMzNDdaMBkxFzAVBgNVBAMT Dm1hcnRpbm9tZmcub3JnMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA wGOaO5c3xyx4IC9R8GXg2gTfVWrwxZff4+sLiKUkRXtTsz8idtAWw3qoVdGl0/mn fvPuMMqU3Rmh1reu8l8K9O9obkS549dXur+Pt7g55H/wtuhWnSipCTC4kN6QIudf aO+Dd+AlXVHpIk/M0bGZOtbY3Qbz8n9Kkh+kYSDR1mqSnIdjgrDnJ0sjvRH2jw2C R7u3sR4MxwQeDbhNCdf9K/w5Yu1qs3/WBd3fNttYb4f2Ns7XxL37Ba0oQ2GFWWH2 DcM9JQusa6Ppq56sfniMR3dk6t0Ai/Vf88hW1XmYqQWSsnPMlR/7ljNLaPHJRu6Q ElwEjTHivDi73NauRvHKEQIDAQABo4IDajCCA2YwDgYDVR0PAQH/BAQDAgWgMB0G A1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1Ud DgQWBBTWmeTOgNRavcTIG0zwsHNlzZ1wHDAfBgNVHSMEGDAWgBQULrMXt1hWy65Q CUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGGFWh0dHA6Ly9y My5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmkubGVuY3Iub3Jn LzCCAXEGA1UdEQSCAWgwggFkgg4wODAwNTU1MTExLmNvbYIbYWxiZXJ0YXZhY2Np bmVwYXNzcG9ydHMuY29tghZhcHByYWlzYWxhcmJpdHJhZ2UuY29tghBiZWxvaXRm bG9yYWwuY29tghRiaWdib2FyZG92ZWNlc2tvLmNvbYISY2FsbG93YXljb3VudHku Y29tgg1jYW5pYnVpbGQuYXBwghZjaHViYnlsaXF1aWRhdGlvbnMuY29tghlnYWNh bGxzLnN0YXRlbmF0aW9uYWxzLnVzghJncHNpbnRlZ3JhdGlvbi5jb22CG2thdGFs eXN0dHJhaW5pbmdzeXN0ZW1zLmNvbYINbG1nc3R1ZGlvLmNvbYIObWFydGlub21m Zy5vcmeCEG1lYXRtYW5yYW5jaC5jb22CFnByZWNpb3VzYXJ0Z2FsbGVyeS5jb22C C3NoaGFhZGkuY29tggxzeWxsYWJsZXMuaW+CCnlldGZvci5jb20wEwYDVR0gBAww CjAIBgZngQwBAgEwggEEBgorBgEEAdZ5AgQCBIH1BIHyAPAAdQBIsONr2qZHNA/l agL6nTDrHFIBy1bdLIHZu7+rOdiEcwAAAY7lLrmLAAAEAwBGMEQCIA+RkDcn5mHw YRLzzXF/uI2Nc1hH4c4T/AlaJiLLxLyjAiATM99a01v33rpj6uzguaX+DHX8q94/ rW48YkE/5poWYQB3ADtTd3U+LbmAToswWwb+QDtn2E/D9Me9AA0tcm/h+tQXAAAB juUuuYYAAAQDAEgwRgIhAMac2uzMppEaraLhFWUJT9XiNT6FVOBszhfVlEnmd2zB AiEA6ZQyAjSVwLHE8RhHXBpFmeosbbjda9mluzptPxZxjy0wDQYJKoZIhvcNAQEL BQADggEBAISo8Qa+UApWmvXxFQcwzqD1oMZ8uc8jiPOYuQkSoHd4klH6fFine8ho hUQCtmvlINcu3dayYYjPyqDyfyoGuebYUgKlhUoxCFTFV3PkeqqD2mCbH2PlYMgF vqXbgikR9HQw0vxnlfVMY2o4t2TAVVvAAddLjN1FJ5cLrwQugan0BxyFNBThjx5z INpXiqS43rhrFhXGVDLmcX4Z6+f/maV36AjCtByuNyZT2Tr4msqHFqRZpgW9HNdz Y4MWFnL6hCZQyf/Q0QVCfBPEnnjVL5K9ZSrZ00cFTOw1dtfYcsSWHuMcRe+lSQaI FmqMshAVgkxTfkp3htpC9J4jlIg5EiE= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwGOaO5c3xyx4IC9R8GXg 2gTfVWrwxZff4+sLiKUkRXtTsz8idtAWw3qoVdGl0/mnfvPuMMqU3Rmh1reu8l8K 9O9obkS549dXur+Pt7g55H/wtuhWnSipCTC4kN6QIudfaO+Dd+AlXVHpIk/M0bGZ OtbY3Qbz8n9Kkh+kYSDR1mqSnIdjgrDnJ0sjvRH2jw2CR7u3sR4MxwQeDbhNCdf9 K/w5Yu1qs3/WBd3fNttYb4f2Ns7XxL37Ba0oQ2GFWWH2DcM9JQusa6Ppq56sfniM R3dk6t0Ai/Vf88hW1XmYqQWSsnPMlR/7ljNLaPHJRu6QElwEjTHivDi73NauRvHK EQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 405343673666823180623414944938585347589257 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-16 03:33:48 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-15 03:33:47 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'martinomfg.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24286870362890167702132491527318481451322872955196280647898324869624961697679911685740736405155027910737184995127751650277457718224899793980054388206097038532829522272978226595947596671997955684192582621027639067349801225750052254968730677386646483925479925815476109900755758204132825526025495630669346667792224364526707923253894161999601652649449854777025141904383710668165857814848442449474742844154247968054883979197035680431287071937872245144022201597215391838437706953674900650031162867906860051326328232806863464469177802430628801973246266684982795484985605917311362730281069318373366584419653649529736866679313 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) d699e4ce80d45abdc4c81b4cf0b07365cd9d701c . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '0800555111.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'albertavaccinepassports.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appraisalarbitrage.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beloitfloral.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bigboardovecesko.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'callowaycounty.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canibuild.app' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chubbyliquidations.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gacalls.statenationals.us' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gpsintegration.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'katalysttrainingsystems.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lmgstudio.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'martinomfg.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meatmanranch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preciousartgallery.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shhaadi.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'syllables.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yetfor.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f000750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018ee52eb98b000004030046304402200f91903727e661f06112f3cd717fb88d8d735847e1ce13fc095a2622cbc4bca302201333df5ad35bf7deba63eaece0b9a5fe0c75fcabde3fad6e3c62413fe69a16610077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018ee52eb9860000040300483046022100c69cdaeccca6911aada2e11565094fd5e2353e8554e06cce17d59449e6776cc1022100e99432023495c0b1c4f118475c1a4599ea2c6db8dd6bd9a5bb3a6d3f16718f2d . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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