frflanaganinstitute.org
Issued by R3
About this certificate
This digital certificate with serial number 04:d0:9c:69:cf:b8:37:30:c3:80:01:3a:ac:10:11:51:29:6a was issued on by Let's Encrypt.
With 9 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=frflanaganinstitute.org
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:d0:9c:69:cf:b8:37:30:c3:80:01:3a:ac:10:11:51:29:6aSerial Number (int): 419435785018162630505674173288073426708842
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: ce:b4:81:08:a2:a5:d6:07:c1:66:23:87:5a:11:95:75:91:17:1d:d8
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 64:55:8d:28:a3:08:b3:28:c4:ab:03:71:63:f5:12:81:99:d4:60:e5
Fingerprint (sha256): 64:af:a0:30:54:16:19:80:b5:82:7d:84:88:4a:f1:89:0b:45:a6:5e:78:ba:e0:c7:0f:96:a3:29:58:2f:cd:f7
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate frflanaganinstitute.org
9
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for frflanaganinstitute.org
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
alluloseorganic.com
boothlaw.net
electricianpoinciana.com
frflanaganinstitute.org
fxstudio.in.workforplay.org
lgb.pw.ujtravel.com
naibel.com
wiwak.vc.lgbtqsociety.com.hollywood4vip.com
www.moltensaltbatteries.com
boothlaw.net
electricianpoinciana.com
frflanaganinstitute.org
fxstudio.in.workforplay.org
lgb.pw.ujtravel.com
naibel.com
wiwak.vc.lgbtqsociety.com.hollywood4vip.com
www.moltensaltbatteries.com
Other certificates including the domain name frflanaganinstitute.org
(limited to 100 certificates)
dumptruck.ca
allanblock.on.ca
cng.world
rental.world
frflanaganinstitute.org
frflanaganinstitute.org
maxler.world
usc.mba
dumptruck.ca
frflanaganinstitute.org
dumptruck.ca
usc.mba
powerbilt.club
frflanaganinstitute.org
jimmy.cc
dumptruck.ca
frflanaganinstitute.org
cng.world
playgolf.club
playgolf.club
playgolf.club
usc.mba
frflanaganinstitute.org
dumptruck.ca
frflanaganinstitute.org
prothena.org
playgolf.club
usc.mba
usc.mba
ipv4.exchange
cng.world
allanblock.on.ca
usc.mba
frflanaganinstitute.org
dumptruck.ca
playgolf.club
radiator.cc
playgolf.club
cng.world
fflsd.org
fireworks.club
ipv4.exchange
dumptruck.ca
allanblock.on.ca
cng.world
rental.world
frflanaganinstitute.org
frflanaganinstitute.org
maxler.world
usc.mba
dumptruck.ca
frflanaganinstitute.org
dumptruck.ca
usc.mba
powerbilt.club
frflanaganinstitute.org
jimmy.cc
dumptruck.ca
frflanaganinstitute.org
cng.world
playgolf.club
playgolf.club
playgolf.club
usc.mba
frflanaganinstitute.org
dumptruck.ca
frflanaganinstitute.org
prothena.org
playgolf.club
usc.mba
usc.mba
ipv4.exchange
cng.world
allanblock.on.ca
usc.mba
frflanaganinstitute.org
dumptruck.ca
playgolf.club
radiator.cc
playgolf.club
cng.world
fflsd.org
fireworks.club
ipv4.exchange
dumptruck.ca
Certificate
The complete raw certificate details for frflanaganinstitute.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFwzCCBKugAwIBAgISBNCcac+4NzDDgAE6rBARUSlqMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzEyMzEwMTU2NTZaFw0yNDAzMzAwMTU2NTVaMCIxIDAeBgNVBAMT F2ZyZmxhbmFnYW5pbnN0aXR1dGUub3JnMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A MIIBCgKCAQEAx9KZ75eo7N9wsiJNGXeMs+UBsvnWGbQ0Zw24j0/DZSYzJcjZaczZ s5wceRXprDNpc4n9un1NnkhwyW7IfU9s40xRqbwJmq7V6z5emIUP8ClMfLD3tXG+ uyAHhWg18luFjiXUIqR8Vr5XJCL5gfUghGucProv2C6h8X6duywf+iF1xjBP9+1T CssFzXsddrcvbAvYm2wiXwv68g/cg1FKff0qMm6w2vtItMpKkNwpU/0/bPbT+xv4 3iAXMyVxaXuBSjNfde4WVS+/hkNH4p/qB6KLMDbZ9D1RuWq9pHd+gc2suyi2yCq7 Cbby/ZkUXxMCPiqdi9M2r3jNazTiLEum+QIDAQABo4IC4TCCAt0wDgYDVR0PAQH/ BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8E AjAAMB0GA1UdDgQWBBTOtIEIoqXWB8FmI4daEZV1kRcd2DAfBgNVHSMEGDAWgBQU LrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGG FWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmku bGVuY3Iub3JnLzCB6QYDVR0RBIHhMIHeghNhbGx1bG9zZW9yZ2FuaWMuY29tggxi b290aGxhdy5uZXSCGGVsZWN0cmljaWFucG9pbmNpYW5hLmNvbYIXZnJmbGFuYWdh bmluc3RpdHV0ZS5vcmeCG2Z4c3R1ZGlvLmluLndvcmtmb3JwbGF5Lm9yZ4ITbGdi LnB3LnVqdHJhdmVsLmNvbYIKbmFpYmVsLmNvbYIrd2l3YWsudmMubGdidHFzb2Np ZXR5LmNvbS5ob2xseXdvb2Q0dmlwLmNvbYIbd3d3Lm1vbHRlbnNhbHRiYXR0ZXJp ZXMuY29tMBMGA1UdIAQMMAowCAYGZ4EMAQIBMIIBBAYKKwYBBAHWeQIEAgSB9QSB 8gDwAHYAO1N3dT4tuYBOizBbBv5AO2fYT8P0x70ADS1yb+H61BcAAAGMvc2V2gAA BAMARzBFAiEAsI4pA9u6BdhWAh9P/hrVByGkaAeFlGr/gyIJ7vPwhgMCIBJmrWAE p7Lw13kzay4OoV3BU++z7yqn9JBnLfsRhHKIAHYASLDja9qmRzQP5WoC+p0w6xxS ActW3SyB2bu/qznYhHMAAAGMvc2X0QAABAMARzBFAiATm84JXPJtJPtAppIxMhHZ 7v3DgcIiytjYzdG1Rs8YrwIhAIhSVD2vkwLvabgTP8pXxk4OkApm3sONa0x8qMgc 5cF9MA0GCSqGSIb3DQEBCwUAA4IBAQAUGAKTP8hyQmXU1oAZvwe7mk640RF6Dlnm rmne4zHfYQqFJL9ffRY5Li/PmTRsiO21rbc5WV5bR467lfPOH0gO8e0jiuGGhZvT yUs5wfcFmvepmCDaRSHdLeM5dK6j2jWUjDvUqhtLjxs/fcQ7zYU2Jbo6EJpEs+z4 Bjwlp1NaalYflmlasnRjLLuhSKR3m4nQRW3riLPH5w3z4JOIEqVAymGTs7NfJe/5 QrbHAQ6UQj9pjJl5PjZGrWV9gKaKRCBDtCODmxMhwdBp+XTiiF83rX5BZqT10Ccc 55kzZ6BDMWWK9p5HgYED8fO++NUIM/uy4YyhIrGbmjOGvbhLOH6z -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx9KZ75eo7N9wsiJNGXeM s+UBsvnWGbQ0Zw24j0/DZSYzJcjZaczZs5wceRXprDNpc4n9un1NnkhwyW7IfU9s 40xRqbwJmq7V6z5emIUP8ClMfLD3tXG+uyAHhWg18luFjiXUIqR8Vr5XJCL5gfUg hGucProv2C6h8X6duywf+iF1xjBP9+1TCssFzXsddrcvbAvYm2wiXwv68g/cg1FK ff0qMm6w2vtItMpKkNwpU/0/bPbT+xv43iAXMyVxaXuBSjNfde4WVS+/hkNH4p/q B6KLMDbZ9D1RuWq9pHd+gc2suyi2yCq7Cbby/ZkUXxMCPiqdi9M2r3jNazTiLEum +QIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 419435785018162630505674173288073426708842 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-31 01:56:56 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-30 01:56:55 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'frflanaganinstitute.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25225274065855857157483486274473939937665891222763252529863384033087750789146880342865466677795308734816138169514909174121792150504551219273658517388339650076576739126683667218908959041454319204678426982473552184354857682281183748893883914813288156426345835536708419005536099612542052968853187148204351157542384481084367007791519116864103174814857244474874830139061291629655765551609352871514542676838840449323873007726833725102271239745263927309188104294510611961942284981724561135755045466937607421476236806217196543128389074996931663894465673305338540615023645516830404621084095511137925156143280067001735025764089 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) ceb48108a2a5d607c16623875a11957591171dd8 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (225 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alluloseorganic.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boothlaw.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'electricianpoinciana.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frflanaganinstitute.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fxstudio.in.workforplay.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lgb.pw.ujtravel.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naibel.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wiwak.vc.lgbtqsociety.com.hollywood4vip.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.moltensaltbatteries.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f00076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018cbdcd95da0000040300473045022100b08e2903dbba05d856021f4ffe1ad50721a4680785946aff832209eef3f0860302201266ad6004a7b2f0d779336b2e0ea15dc153efb3ef2aa7f490672dfb1184728800760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018cbdcd97d100000403004730450220139bce095cf26d24fb40a692313211d9eefdc381c222cad8d8cdd1b546cf18af0221008852543daf9302ef69b8133fca57c64e0e900a66dec38d6b4c7ca8c81ce5c17d . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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