www.schoolsinafrica.org

Issued by R3

About this certificate

This digital certificate with serial number 04:a7:d3:85:68:68:a0:3d:24:c4:e8:63:a0:89:7c:7c:dc:54 was issued on by Let's Encrypt.

With 30 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.schoolsinafrica.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:a7:d3:85:68:68:a0:3d:24:c4:e8:63:a0:89:7c:7c:dc:54
Serial Number (int): 405557458803090431567077582826691358415956
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 4b:97:07:b7:6a:55:0d:c0:a1:46:83:46:fe:4e:7a:84:aa:0a:39:1d
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 8d:6b:e9:12:b5:bc:3e:c5:0f:77:5a:95:28:78:6b:a9:45:15:f8:84
Fingerprint (sha256): 67:14:01:48:0f:e6:ab:a3:c8:e9:48:e2:1a:3c:a4:75:41:53:21:cf:1a:bc:6e:8c:73:42:98:a4:69:e8:a4:71

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.schoolsinafrica.org

30

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.schoolsinafrica.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

calmpay.tech
digitaldollar.global
dyson.life
girlfriendsecrets.cam
glutenfreefoodpantry.org
gpspro.tech
internationalconsumeradvocates.org
ir.link
judenwatch.world
m3z3.com
metaui.tech
pooh03.com
schoolsinafrica.org
thefreewill.co.uk
www.calmpay.tech
www.digitaldollar.global
www.dyson.life
www.girlfriendsecrets.cam
www.glutenfreefoodpantry.org
www.gpspro.tech
www.internationalconsumeradvocates.org
www.ir.link
www.judenwatch.world
www.m3z3.com
www.metaui.tech
www.pooh03.com
www.schoolsinafrica.org
www.thefreewill.co.uk
www.zap.gl
zap.gl

Other certificates including the domain name schoolsinafrica.org

(limited to 100 certificates)
www.schoolsinafrica.org
www.botz.onl
xn--si-mua.com

Certificate

The complete raw certificate details for www.schoolsinafrica.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzxfM+JE0et3WszvpBqLN
wlxV5NTrVea6T6TGqXwI2Y3yrtSl7hb8jSpSlluuI9k7+q2K6GTh9bNYk3OGeheC
ZgXDi/qO8IbZHPfMm7gXe7nf7MEBP0ZSK33KUb+PtG4wYiVytLLXgOtU8yji0oYI
YYgqHubsA3M6/VDSzw1HNDVu4zudTx8hinh1htwzRgvDptl8QfXARugcLwAtUIrm
9Mk7HIykbI8hPPAgX/p73yT//PwqvcKNtvpkOegzvE2pgHOIvFVsubfyW3VC36C7
L1XeSlHx1PFneoARABspnUMm33g1Gavpf7b2UOEZhnpIV/K2M21u8tlZjpep3L3i
vwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 405557458803090431567077582826691358415956
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-07 17:15:50 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-05 17:15:49 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.schoolsinafrica.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26143065674710453417351490310333729092342976665765729741423879489607058253305252623087614861609740547162923259327152635868607164648724640153334728621928811344115628076176379612909096948924128844932225025308790374314652131952906889590458610806530965318760723382441163870120067879573496687259978207215923295796985657338143717006422540420518982094887465473094427346086521778008901746834872465974220038575854010907054658319241815143000190363870583675159843904480038736491496306153703726306746294505089461052941489653673081248780545104006633873848765584542819905563228312523774269143389430035095484969841297746649518301887
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4b9707b76a550dc0a1468346fe4e7a84aa0a391d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (576 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'calmpay.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitaldollar.global'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dyson.life'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'girlfriendsecrets.cam'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glutenfreefoodpantry.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gpspro.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'internationalconsumeradvocates.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.link'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'judenwatch.world'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm3z3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metaui.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pooh03.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schoolsinafrica.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thefreewill.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.calmpay.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.digitaldollar.global'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dyson.life'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.girlfriendsecrets.cam'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.glutenfreefoodpantry.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gpspro.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.internationalconsumeradvocates.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ir.link'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.judenwatch.world'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m3z3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.metaui.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pooh03.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.schoolsinafrica.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thefreewill.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zap.gl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zap.gl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018f5444e0de0000040300483046022100cd01d64e5668f20798c4c7b58eac7e1495e782ce7bacfebc33c484e7aff39ceb0221009f4f45157241a093db2f0c0718179fabab428ee865e7c99199af3ca84b7077d400760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018f5444e0de00000403004730450220067f97e5e52dc77428f8d6c6a385ecd022904d43a01aa5e5eafa87ddb2fcafe50221008ddf869a976b3ff64b95b091a8651c2c461a968cd7f94db2315df20bfdf079b6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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