bhagawadgita.org

Issued by R3

About this certificate

This digital certificate with serial number 04:4a:f4:b8:5e:8d:2a:36:d8:55:52:bf:1e:91:3e:7d:ee:11 was issued on by Let's Encrypt.

With 13 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=bhagawadgita.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:4a:f4:b8:5e:8d:2a:36:d8:55:52:bf:1e:91:3e:7d:ee:11
Serial Number (int): 373955327810514661095837640692857176976913
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 31:af:b3:6c:ff:7a:6f:44:fd:13:84:fc:6d:54:f7:a4:f9:27:b6:dc
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 80:69:32:6a:ba:74:29:44:59:87:ec:49:a3:07:fb:8b:bf:3f:e9:81
Fingerprint (sha256): 67:da:ab:9e:a8:e7:28:6b:ea:5d:8f:b6:f4:ad:d2:58:7c:4b:c0:36:bc:8a:86:b7:c2:fb:c3:e5:6d:f9:f5:88

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate bhagawadgita.org

13

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bhagawadgita.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

arbitrageintl.com
bhagawadgita.org
cassgarbage.com
cretepd.com
cxoco.com
expertnetworkers.com
houstontxcontractor.com
oglethorpecounty.com
rev2x.com
sadboiart.com
squirt8k.com
texasmarksmanshipassociation.org
umiuniversity.com

Other certificates including the domain name bhagawadgita.org

(limited to 100 certificates)
bhagawadgita.org
bhagawadgita.org
beach.coffee
grocer.cc
commercialistavenezia.org
grocer.cc
grocer.cc
billyo.com.bhagawadgita.org
epik.africa
bhagawadgita.org
bhagawadgita.org
www.epik.africa
bramptonhomebuyers.ca
available.forsale
disposophobia.org
bhagawadgita.org
bhagawadgita.org
backorder.world
epik.africa
www.epik.africa
bhagawadgita.org
arbitrage.gg
bramptonhomebuyers.ca
bhagawadgita.org
bhagawadgita.org
vwv.co.za
bhagawadgita.org
lgbtqia.bible
ebaytes.ca
bhagawadgita.org
advertise.world
bhagawadgita.org
grocer.cc
dinosupplies.store
holding.live

Certificate

The complete raw certificate details for bhagawadgita.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5KjbjnYLeW6uAqNpj2Qw
t9Av5dThTS2C4PBkQ34FwQcJ1RCV9g1Bz8IKijRr0lTfQyPUffKDhBcJHzkJeSUA
d16kYnimCKtI3eYj5srMFCNeBFQfRZnKOTI2023nctLcholKq0y/wRB4+EKzlf6t
QEq3iHrm7ZaEB16FbX9hiUZQgrFnlKsw6s4pDKYUSH10GdW6SogMHc33ltxBlAa8
dqNuRKKDAVlmnICuIY3Sp5cKPEFxqIZcjaxbBpYmzwlv703G/j61XIe+uYy129cf
3GsdbHLY/nZUP/nc4vxuRRR5wv97k8tP//v81N2dCF0EtCVkoHSIwi/D84p9BzOM
AwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 373955327810514661095837640692857176976913
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-15 16:44:52 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-14 16:44:51 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bhagawadgita.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28865600339191308078143962810806564370936492551071335141410574882044502370549966837483520184787630785371567937246240405078256257445416381361248461725557926979556262796441390869802019965358092883694344387809841007020539572460065882932700450143370431593653766570359107535952187829816001045964249248922755509269396342864421023708923113316436147360264894111094228230880758267869421119095027668797223348015048794803605874079819436920870363902214122658094459044491236055611076974231637766001449294758014946209057527315623992239947442259044054663384715215531087772466689634318021300985922894190067871378743343506744782588931
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							31afb36cff7a6f44fd1384fc6d54f7a4f927b6dc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arbitrageintl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bhagawadgita.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cassgarbage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cretepd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cxoco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expertnetworkers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'houstontxcontractor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oglethorpecounty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rev2x.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sadboiart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'squirt8k.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'texasmarksmanshipassociation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'umiuniversity.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018ee2dc9ea9000004030046304402203cf3374d5ca5251ed2674d2319ba1879b9de521755c1d898baff344cff39c26702207ea1fc0e86c15ff2998d8da2d3ca6c178c4eccb2954b364759f70ae821807978007500dfe156ebaa05afb59c0f86718da8c0324eae56d96ea7f5a56a01d1c13bbe525c0000018ee2dc9f7e000004030046304402203777185568bd1cff9095149335b0a331a3b68e48562caa82e57259a5c45b079702201a7015afa197377669510cbed8dbfcf889d8f826f4b57138b6b831a02952c135
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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