hempmedicine.org
Issued by R3
About this certificate
This digital certificate with serial number 04:99:04:23:0d:34:e1:c6:ea:3f:a1:5f:c1:57:e4:77:78:10 was issued on by Let's Encrypt.
With 19 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=hempmedicine.org
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:99:04:23:0d:34:e1:c6:ea:3f:a1:5f:c1:57:e4:77:78:10Serial Number (int): 400517844776178823777793604239508863678480
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 58:da:a1:3f:9c:fc:4a:b8:19:6e:19:de:68:47:62:da:f4:02:12:d1
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): ae:b5:7a:12:d9:f3:dc:45:9f:c4:9e:5b:d6:f5:ae:ab:46:01:66:65
Fingerprint (sha256): 60:cf:89:72:c5:7b:6e:9a:92:a6:1f:b2:8c:0e:91:09:44:cf:a1:76:c0:d2:13:a8:0c:5d:32:5e:99:70:e0:4f
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate hempmedicine.org
19
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for hempmedicine.org
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
americacitytours.com
anbow.com
banfructose.com
chinesephilosophy.com
cryptocoinprofits.com
culturecatered.com
expressmigration.com
fantasticsidegig.com
heavy.team
hempmedicine.org
identist.co.in
jaycounty.com
joinjakin.com
libra-bucks.com
natyalaya.in
perdidokeyfl.com
pulpfan.com
shortcutdomains.com
tahoelistings.com
anbow.com
banfructose.com
chinesephilosophy.com
cryptocoinprofits.com
culturecatered.com
expressmigration.com
fantasticsidegig.com
heavy.team
hempmedicine.org
identist.co.in
jaycounty.com
joinjakin.com
libra-bucks.com
natyalaya.in
perdidokeyfl.com
pulpfan.com
shortcutdomains.com
tahoelistings.com
Other certificates including the domain name hempmedicine.org
(limited to 100 certificates)
Certificate
The complete raw certificate details for hempmedicine.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGMzCCBRugAwIBAgISBJkEIw004cbqP6FfwVfkd3gQMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDAzMTMwMDE2MDdaFw0yNDA2MTEwMDE2MDZaMBsxGTAXBgNVBAMT EGhlbXBtZWRpY2luZS5vcmcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDFQV+sZQLyvL6oygA1H0SQ0a585n8E2xIlzHtj9bis26NikF62LjwbQB7Z9NrR Rk93h0XiZ7BN0Tb33nNSCNMYnzIAg78jQOPi4DzZu1nBAGuFN5iHgNLyqsb6gESm jyJYYbrQaE4/ePIK7G8+sX3ob6zXl3RYxGQ0hs6kkd0za0h81uuqahlI8Km26Ak2 kHvlTiB5kWFAsWi1HgdLcQhjgJ7EPCGyCvpTyFfZUhxubCI+N4cAQ1AQXDvYeA3F GOtDF3oYZdiP7E2iRDJFHtNrENo9Iw8qIuOUZuMsE5saaN97WtnpRu0xaNLD/nvP aLy/gjQaWscb9wzahubKMfNTAgMBAAGjggNYMIIDVDAOBgNVHQ8BAf8EBAMCBaAw HQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYD VR0OBBYEFFjaoT+c/Eq4GW4Z3mhHYtr0AhLRMB8GA1UdIwQYMBaAFBQusxe3WFbL rlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0cDov L3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5jci5v cmcvMIIBXwYDVR0RBIIBVjCCAVKCFGFtZXJpY2FjaXR5dG91cnMuY29tgglhbmJv dy5jb22CD2JhbmZydWN0b3NlLmNvbYIVY2hpbmVzZXBoaWxvc29waHkuY29tghVj cnlwdG9jb2lucHJvZml0cy5jb22CEmN1bHR1cmVjYXRlcmVkLmNvbYIUZXhwcmVz c21pZ3JhdGlvbi5jb22CFGZhbnRhc3RpY3NpZGVnaWcuY29tggpoZWF2eS50ZWFt ghBoZW1wbWVkaWNpbmUub3Jngg5pZGVudGlzdC5jby5pboINamF5Y291bnR5LmNv bYINam9pbmpha2luLmNvbYIPbGlicmEtYnVja3MuY29tggxuYXR5YWxheWEuaW6C EHBlcmRpZG9rZXlmbC5jb22CC3B1bHBmYW4uY29tghNzaG9ydGN1dGRvbWFpbnMu Y29tghF0YWhvZWxpc3RpbmdzLmNvbTATBgNVHSAEDDAKMAgGBmeBDAECATCCAQQG CisGAQQB1nkCBAIEgfUEgfIA8AB3AEiw42vapkc0D+VqAvqdMOscUgHLVt0sgdm7 v6s52IRzAAABjjVhiGgAAAQDAEgwRgIhAONZDZKLI3aLJKvl8YVyrev+90nCMm47 cVlfKcbMbLKnAiEA09wf4ORHZYSLNAqCfVH5Yzv36sRKkWVo+tRbDCy82xIAdQB2 /4g/Crb7lVHCYcz1h7o0tKTNuyncaEIKn+ZnTFo6dAAAAY41YYgtAAAEAwBGMEQC IDZen1f8BlJHLha63oTQVEDSnhS6gKlBDrhhga9742NYAiBIqwpYi56oOR+gHI8K JuTHYziiBTG4KdebjeGWyYvECTANBgkqhkiG9w0BAQsFAAOCAQEAByqz5sV2WNbp qgYq6yJjBFvKNwKOoZ/JXnoeLkQfIpXMCOmtnHcDBSH31GNV0690/NMIl27QFGs2 wW9CyWNABNJlWwakhZVc8t3qsY30VcE37h8CaYZh0J+4LCQeRJTvft90+FrueT3X kYqUMRBqaAUFkaAUMrjQNXBHIxB2+Tdnel1ingXCKDUqjG7FlPqr4m5jCaFUE2Yv BQCbK/nnKnSatrHwGQ5dill/46DZWuXKfS+SSe1M1MlUqZ8SMQ6g0rVOJlXFIUi5 JzVmyKxHwqvyh+bgut1lwz/JG0WXaiwwhdj/iUyR7zWZlOiJTPRGR0axZ6XSPshy lk3Fs82GiA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUFfrGUC8ry+qMoANR9E kNGufOZ/BNsSJcx7Y/W4rNujYpBeti48G0Ae2fTa0UZPd4dF4mewTdE2995zUgjT GJ8yAIO/I0Dj4uA82btZwQBrhTeYh4DS8qrG+oBEpo8iWGG60GhOP3jyCuxvPrF9 6G+s15d0WMRkNIbOpJHdM2tIfNbrqmoZSPCptugJNpB75U4geZFhQLFotR4HS3EI Y4CexDwhsgr6U8hX2VIcbmwiPjeHAENQEFw72HgNxRjrQxd6GGXYj+xNokQyRR7T axDaPSMPKiLjlGbjLBObGmjfe1rZ6UbtMWjSw/57z2i8v4I0GlrHG/cM2obmyjHz UwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 400517844776178823777793604239508863678480 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-13 00:16:07 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-11 00:16:06 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'hempmedicine.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24901183063246118988461267608818561194310598427063598783426328116714262637600344138219674798210257788865797520295072467995492739391503772554257361141856023528198403931453479472022892555220262610736361262480144012367199158813837145352618290383107264036198777744339961312661275097505592462635331791450402000147477053437618766725289285857661651324524475256818761095845116140848966439053728248309026134935122634327738555006081202401235044607529355433601665320633646784059691689319018735670761512272948995926763983032794021599684370398821680926518507690934159276537176132432003387670437729077011395346233324653278982697811 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 58daa13f9cfc4ab8196e19de684762daf40212d1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (342 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'americacitytours.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anbow.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'banfructose.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chinesephilosophy.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cryptocoinprofits.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'culturecatered.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expressmigration.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fantasticsidegig.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heavy.team' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hempmedicine.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'identist.co.in' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jaycounty.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'joinjakin.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libra-bucks.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'natyalaya.in' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perdidokeyfl.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pulpfan.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shortcutdomains.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tahoelistings.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f000770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018e356188680000040300483046022100e3590d928b23768b24abe5f18572adebfef749c2326e3b71595f29c6cc6cb2a7022100d3dc1fe0e44765848b340a827d51f9633bf7eac44a916568fad45b0c2cbcdb1200750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018e3561882d00000403004630440220365e9f57fc0652472e16bade84d05440d29e14ba80a9410eb86181af7be36358022048ab0a588b9ea8391fa01c8f0a26e4c76338a20531b829d79b8de196c98bc409 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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