www.healthywestvirginia.org.wvruralhealth.org

Issued by R3

About this certificate

This digital certificate with serial number 03:1d:aa:82:cd:36:75:55:28:01:82:a7:28:da:a4:df:a8:8b was issued on by Let's Encrypt.

With 12 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.healthywestvirginia.org.wvruralhealth.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:1d:aa:82:cd:36:75:55:28:01:82:a7:28:da:a4:df:a8:8b
Serial Number (int): 271431694356071602824423914640973351594123
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: a5:4c:85:ae:c9:1c:0b:74:15:37:32:71:a0:30:cd:f4:dd:71:e8:5c
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): b3:ad:76:59:49:33:0c:06:9a:35:68:61:46:e9:10:4e:d3:87:9b:d4
Fingerprint (sha256): 65:32:2d:f5:6f:d9:29:5d:82:f0:3b:e1:44:59:a1:e0:38:02:d7:8f:eb:7d:8b:c8:d7:41:a6:0d:98:82:95:b7

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.healthywestvirginia.org.wvruralhealth.org

12

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.healthywestvirginia.org.wvruralhealth.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.appalachianleadershipforum.net
*.com.wvruralhealth.org
*.healthywestvirginia.org
*.immunizenow.com
*.net.wvruralhealth.org
*.org.wvruralhealth.org
appalachianleadershipforum.net
healthywestvirginia.org
immunizenow.com
www.appalachianleadershipforum.net.wvruralhealth.org
www.healthywestvirginia.org.wvruralhealth.org
www.immunizenow.com.wvruralhealth.org

Other certificates including the domain name wvruralhealth.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.healthywestvirginia.org.wvruralhealth.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIrEBTGqWij9IxtDnFkg
2xivjGXDUyklT+XuG3H6J00m/oiPmje62qoGg1y8Qqz3VbHw/DhKe/O2zcaRPeqX
PIDKnAQEv1jOgLfPYHPHzSD7BPaUQpCJztU7tjuwtZ0au1PNenpLxWge96M2XJvY
B7lhnN7f1dT31oZZTZ/TtxK/QkeTE/u3c2rTpxDCk4OPQwoA+oGfGbwn3Lwy/ltt
LhDPDxRyL2B4gmy1aBcFiqL549iEpWittO15aBYArwkBsRdsfIGwXZYZjfN8g6W9
I++tggIo7VGHhbPoAA59j9rvM+urs6sAsVQbjVXaNRGhvxy+LiUWRt6KmiS/FaPQ
qQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 271431694356071602824423914640973351594123
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-03 13:42:56 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-02 13:42:55 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.healthywestvirginia.org.wvruralhealth.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21781416373273318019140128662798139530342300463780886169596842316866523898996762276334269310011453074595394991090377077466326994413371920431959884993431197556498596199185884815320863202477147390245463645163182918305544135135452689793874140408238532071842107786725378963219311184326106023776304196688276061843067334941494784755999465607238639909372601186705907581075879022665669816590913418214371745075889067307347517728568490755611394421677968731404395372142647382393905443325922076726127604647476351330060989594477329869149470407684054599724617112686833277266926536148169457037055620834731618698370977705223619072169
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a54c85aec91c0b7415373271a030cdf4dd71e85c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (373 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.appalachianleadershipforum.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.com.wvruralhealth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.healthywestvirginia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.immunizenow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.net.wvruralhealth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.org.wvruralhealth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appalachianleadershipforum.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthywestvirginia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'immunizenow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.appalachianleadershipforum.net.wvruralhealth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.healthywestvirginia.org.wvruralhealth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.immunizenow.com.wvruralhealth.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018ccfc7065c0000040300483046022100dd5af7af16db75b8b1a57606b33149a01d27dc4bac4a431e260ca1df3f548e2702210085d3fdb4c277b00a87bac2e3de72f51e26473a6d989fc64c8a2cc3db018122dc00760029d03a1bb674aa711cd3035b6557c14f8aa78b4fe8389449eca453f944bd24680000018ccfc7072e0000040300473045022028fa2b73813ed4cc9ac75e7d2f1a278180a492db1b6d722147a005d0c97f64f9022100daef3c75b2f10fd45e06b5efbed08f6b6f20830fb2ca2537d9e088e8ae861000
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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