congratulation.org
Issued by R3
About this certificate
This digital certificate with serial number 04:1a:7d:83:96:cf:c9:93:b5:a8:37:25:3e:1e:7c:31:19:bd was issued on by Let's Encrypt.
With 16 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=congratulation.org
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:1a:7d:83:96:cf:c9:93:b5:a8:37:25:3e:1e:7c:31:19:bdSerial Number (int): 357463322016171024428199866418500312570301
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 75:e2:9b:83:f0:ff:cf:6f:87:1d:6c:a2:21:5f:73:70:5d:04:03:fe
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 01:20:a9:2e:13:d6:b4:11:8f:08:21:15:56:06:fb:1a:4a:a2:d7:27
Fingerprint (sha256): 62:4b:cc:bd:c2:ec:40:3f:ef:37:11:97:90:0a:4f:1c:b7:2a:45:85:1f:eb:32:b3:e8:2b:8b:e9:2b:5d:8e:28
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate congratulation.org
16
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for congratulation.org
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
amandagracegrows.com
careerblogs.com
cityofthousandoaks.com
congratulation.org
englishivyremoval.com
killcops.com
lindellradio.org
mcphersoncounty.com
oklahomaheatingandcooling.com
rakkestad.com
showcase7v7.com
sportjournalist.com
tignall.com
timstunes.com
whatdiabetes.com
wreckpros.com
careerblogs.com
cityofthousandoaks.com
congratulation.org
englishivyremoval.com
killcops.com
lindellradio.org
mcphersoncounty.com
oklahomaheatingandcooling.com
rakkestad.com
showcase7v7.com
sportjournalist.com
tignall.com
timstunes.com
whatdiabetes.com
wreckpros.com
Other certificates including the domain name congratulation.org
(limited to 100 certificates)
congratulation.org
www.congratulation.org
www.congratulation.org
congratulation.org
biblecourse.ca
congratulation.org
congratulation.org
www.cosmetic-clinic.com
congratulation.org
congratulation.org
overcomersrecovery.ca
profoundstrategy.us.speakandread.com.congratulation.org
congratulation.org
www.congratulation.org
bombersfastpitch.org
overcomersrecovery.ca
congratulation.org
congratulation.org
congratulation.org
congratulation.org
www.congratulation.org
www.congratulation.org
congratulation.org
biblecourse.ca
congratulation.org
congratulation.org
www.cosmetic-clinic.com
congratulation.org
congratulation.org
overcomersrecovery.ca
profoundstrategy.us.speakandread.com.congratulation.org
congratulation.org
www.congratulation.org
bombersfastpitch.org
overcomersrecovery.ca
congratulation.org
congratulation.org
congratulation.org
congratulation.org
Certificate
The complete raw certificate details for congratulation.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGEzCCBPugAwIBAgISBBp9g5bPyZO1qDclPh58MRm9MA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDAyMjkwMTM5NTNaFw0yNDA1MjkwMTM5NTJaMB0xGzAZBgNVBAMT EmNvbmdyYXR1bGF0aW9uLm9yZzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALbg/jnLd02QD7QKSby1ymHdTAx7KoGV2djpy9+I6h0NqYlrpZGRXJL2Y/Lv zxfOONHoVXMFtfkCwdS/gqpuhMNW8wAXpfLjvQ5QfssfY2IXT11TG9wrFXy7Sued LQBtBQZmQjNJaTJQqQX016Fsenfei1eQz7U5d9JNXIO2z9KQJzDJju9jThMd3hiS jlS0XqfN6an+OZeDV2qMjxKK99PoqVMqqslJRBrjIuG6K7+b5h0PAfYZqDfBI88K xAaZOVfdYirW7fA9vDXfYzaRlOX9WNuwA+Lsor2u9GwbxbpyM5u7x2E1Q6S99bs4 tLONqnhI4guZVGb3bYMixXNouFUCAwEAAaOCAzYwggMyMA4GA1UdDwEB/wQEAwIF oDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAd BgNVHQ4EFgQUdeKbg/D/z2+HHWyiIV9zcF0EA/4wHwYDVR0jBBgwFoAUFC6zF7dY VsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRw Oi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNy Lm9yZy8wggE9BgNVHREEggE0MIIBMIIUYW1hbmRhZ3JhY2Vncm93cy5jb22CD2Nh cmVlcmJsb2dzLmNvbYIWY2l0eW9mdGhvdXNhbmRvYWtzLmNvbYISY29uZ3JhdHVs YXRpb24ub3JnghVlbmdsaXNoaXZ5cmVtb3ZhbC5jb22CDGtpbGxjb3BzLmNvbYIQ bGluZGVsbHJhZGlvLm9yZ4ITbWNwaGVyc29uY291bnR5LmNvbYIdb2tsYWhvbWFo ZWF0aW5nYW5kY29vbGluZy5jb22CDXJha2tlc3RhZC5jb22CD3Nob3djYXNlN3Y3 LmNvbYITc3BvcnRqb3VybmFsaXN0LmNvbYILdGlnbmFsbC5jb22CDXRpbXN0dW5l cy5jb22CEHdoYXRkaWFiZXRlcy5jb22CDXdyZWNrcHJvcy5jb20wEwYDVR0gBAww CjAIBgZngQwBAgEwggEEBgorBgEEAdZ5AgQCBIH1BIHyAPAAdgBIsONr2qZHNA/l agL6nTDrHFIBy1bdLIHZu7+rOdiEcwAAAY3yu4pNAAAEAwBHMEUCIHs7fOBWbv6m wvLyCnpgOTtzNJz6221qxRlcRxptVATjAiEA9UN15DZJC6n/t11+Y05aTUzkaKkN cwUXBOgMIpIAwTkAdgDuzdBk1dsazsVct520zROiModGfLzs3sNRSFlGcR+1mwAA AY3yu4pWAAAEAwBHMEUCIQDGo9OJfip40nEkXekwlPfH9Va/GS993HlqgEh0IHJu PAIgERaWsr033bMxJQO3uvNFGpqP8N+ViXQif5rk/n+cDMwwDQYJKoZIhvcNAQEL BQADggEBAI0/CYP3yJArwtcmDqcF7xN7Y7pNlDJhyx6eMqvEQ5DRPjG5BhAjubzx Rye6GaBHXbDGdwVJgAdhERMUEdiBZg1CY1w65nWkiCbe13GtwvDxs0WnEwwke0XY xaDJ/lABk0rSmQWjvHJwcyoXTL7mP7mYngzvhJF5BV70jD0Ndl/tYJMuVzjhzcf8 xBBA4b9ljWzobCYk7AHM6plz2cDaxqwcAKNtE62JP3mh9DoQagfwjPQaCpxhe+oy UznwxYcrbecQtaf/AgV/MDEG/MbdMaB48ycfUlgt9whVCNO1+arLP3egNFg1pIeE nZy4IfjIRr62QeaCgRrT78I3g2zNRok= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtuD+Oct3TZAPtApJvLXK Yd1MDHsqgZXZ2OnL34jqHQ2piWulkZFckvZj8u/PF8440ehVcwW1+QLB1L+Cqm6E w1bzABel8uO9DlB+yx9jYhdPXVMb3CsVfLtK550tAG0FBmZCM0lpMlCpBfTXoWx6 d96LV5DPtTl30k1cg7bP0pAnMMmO72NOEx3eGJKOVLRep83pqf45l4NXaoyPEor3 0+ipUyqqyUlEGuMi4borv5vmHQ8B9hmoN8EjzwrEBpk5V91iKtbt8D28Nd9jNpGU 5f1Y27AD4uyiva70bBvFunIzm7vHYTVDpL31uzi0s42qeEjiC5lUZvdtgyLFc2i4 VQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 357463322016171024428199866418500312570301 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-29 01:39:53 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-29 01:39:52 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'congratulation.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23086319721429904682349662224728316066431112334811132434311854842978210342462385860796668742732250685444683057662707284591348465540286900024661889301978676554471123071138648942798664694121663699608511696511802654664598953048473309537507688908917619779517165281886338352035289905962428423095775800538227197867025929397728322813504521894944534204412467833006300222108371837675368657967977809537796006093342385111151430380067984222413797506944206287784260508668522185288229067779654196620170431528620378989083363948214160216544268810149768054750380207851173624980341302864300179406359289616040117265815404053469023746133 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 75e29b83f0ffcf6f871d6ca2215f73705d0403fe . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (308 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amandagracegrows.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'careerblogs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cityofthousandoaks.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'congratulation.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'englishivyremoval.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'killcops.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lindellradio.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcphersoncounty.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oklahomaheatingandcooling.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rakkestad.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'showcase7v7.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportjournalist.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tignall.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'timstunes.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whatdiabetes.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wreckpros.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018df2bb8a4d000004030047304502207b3b7ce0566efea6c2f2f20a7a60393b73349cfadb6d6ac5195c471a6d5404e3022100f54375e436490ba9ffb75d7e634e5a4d4ce468a90d73051704e80c229200c139007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018df2bb8a560000040300473045022100c6a3d3897e2a78d271245de93094f7c7f556bf192f7ddc796a80487420726e3c0220111696b2bd37ddb3312503b7baf3451a9a8ff0df958974227f9ae4fe7f9c0ccc . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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