stlouiscatholic.blog

Issued by R3

About this certificate

This digital certificate with serial number 03:65:13:9e:88:c6:14:0a:4d:d9:b4:36:45:e2:3e:e9:83:ee was issued on by Let's Encrypt.

With 15 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=stlouiscatholic.blog

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:65:13:9e:88:c6:14:0a:4d:d9:b4:36:45:e2:3e:e9:83:ee
Serial Number (int): 295731455343220171085567301847157282800622
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 0a:1f:6a:64:43:43:fd:78:df:e0:a6:17:86:17:53:c9:70:00:50:ab
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 25:2b:82:40:24:9a:24:a2:2b:df:d1:c0:1f:3e:47:6c:b2:93:38:e0
Fingerprint (sha256): 61:ec:2f:88:b2:a7:e4:45:5b:7a:ca:9a:0f:cb:a2:8f:b9:61:17:04:91:0d:df:07:3f:4f:b2:3e:2a:67:98:5c

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate stlouiscatholic.blog

15

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for stlouiscatholic.blog

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

arbitrageurs.com
cortlandcompanies.com
earthymamashop.co
eastonpa.com
gflexglock.com
gotg.pet
missionpeakhealth.com
renaissancespirit.com
shootingkiwimusic.nz
showengager.com
stlouiscatholic.blog
trustplanner.com
valuationlitigation.com
wearecontent.net
wewoka.com

Other certificates including the domain name stlouiscatholic.blog

(limited to 100 certificates)
internalhemp.com.stlouiscatholic.blog
markup.bible
stlouiscatholic.blog
canibuild.world
parcel.tube
livingwater.bible
stlouiscatholic.blog
stlouiscatholic.blog
stlouiscatholic.blog
aboutbetter.com.drugboss.com.stlouiscatholic.blog
q8.co.za
stlouiscatholic.blog
fat.vc
fat.vc

Certificate

The complete raw certificate details for stlouiscatholic.blog in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5r/KwUf2Yy3BCfGHr6L6
9ajKYnW+9GHd4hH1WM3TtG0kkPJRc/hQJx5KjTbbf92M6GKAxT4bULFKo4JCgO0k
4vBtZ6BZLigY0AyjgmEyzM33jE7fvL24KPxjwBvLTq9v4OrFnavMY+gDNNiXp7qv
UNtz0yCY961N5NXAA77gXx4A66KDuX/iuwwXtQMMZl79s95xxKVjjEJyYcR9/iCr
OcSJ7dezpjHYBGnaCuGd61MI1qShVetFsuEjthUrv0IGvf6cvP/H/j76KgJIxcU4
kUyEaJu2Yscicm35fhFsR74SVkYqteCZskjtIHNbcUwzSKwFP5nh6wr9h+4ko60L
bwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 295731455343220171085567301847157282800622
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-27 18:24:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-26 18:24:26 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'stlouiscatholic.blog'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29129386308082275003544708953852113352541320718883076488600072991349394575539751025712465083282496541051475164119009557503844860978935556129125999253062712579544057017749456805771786984620546377343808489139220963008254561012125831194397659784169366607670153772001443885368701183848687622556357260174956503193723461697606026818996123945092474788102674792785522753387528615822633232161547846716245154888305529149947214128663048865714997261092447133513973284277742140395684514535015867373183709286112528221495424813089408474058640226509556391227224908461343288813816702433356164269884037338646635815580247939405434391407
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0a1f6a644343fd78dfe0a617861753c9700050ab
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (284 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arbitrageurs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cortlandcompanies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'earthymamashop.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eastonpa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gflexglock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gotg.pet'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'missionpeakhealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'renaissancespirit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shootingkiwimusic.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'showengager.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stlouiscatholic.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trustplanner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'valuationlitigation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wearecontent.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wewoka.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018f21041841000004030047304502200b018be3d97d494604311f2985d862c6605563ad600074bdf0de09a81695888c022100d9c528e49c20244a039dfa8fe282f3f146e8aeb95817dffda013a5ff07d771410077003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018f210418450000040300483046022100e39a1880013e4ab0375142cde8d247dce6408c9dbe3ae292bd838f6595ad71d7022100a45d8a711bcbe3f587508c297472dcb3e7c20917b1e786cf582c5715de1e4b6e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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