www.charterlawsac.com

Issued by R3

About this certificate

This digital certificate with serial number 03:5d:b9:f8:6a:f1:f5:4d:0e:0c:4a:90:77:42:58:1b:02:ec was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.charterlawsac.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:5d:b9:f8:6a:f1:f5:4d:0e:0c:4a:90:77:42:58:1b:02:ec
Serial Number (int): 293230314956874465249753591649272522801900
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 9a:98:41:ee:2b:c8:30:96:de:81:27:4c:30:8c:76:b1:6f:9c:8b:4e
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): dc:f2:5f:86:b3:89:19:e4:8b:7a:4d:41:97:6e:6e:1b:2c:68:3c:9f
Fingerprint (sha256): 6d:6d:65:87:46:58:05:c7:ca:96:cf:8c:a1:f5:8b:64:60:ca:df:a1:d3:56:53:c7:82:3c:5c:5c:42:5c:de:e9

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.charterlawsac.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.charterlawsac.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

charterlawsac.com
www.charterlawsac.com

Other certificates including the domain name charterlawsac.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.charterlawsac.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAmp6//9dGLmvjITka8PGB
VxNKgIwwgm0Ry6HMNVEy6/hx0x1uaO+o3FYpqJHEB+kVtYK5h7VMVVeHR8vp5uUI
sgbRdSkjS622TW+uJYs9KNbGqVdViyfDtIiZP47CKaP1E8MFQjfRBAvXQtDxlaVg
29TcHG0UEJn1O6wVh+QUDYV9yaANpHDvjmeZ9zVX23MQWUfANoJF7srICW8sIHlc
vSMBML6NB6fvKx5xD03I9p2H350dKc54D715KZmMHrwOWYha+DkG65OQ3H5ZvhkM
rY5yONWEgYMsCejIBxnyNeuWdnBd6AGvSm7aIkK/xdLXjRHOSCLBxxIIuwhhjG3c
q3+rgLnNegBNcWqSESoNuA/pKao16x/N9jTGdA1wf3NhYYrmwCmmtcrXLnda5G9h
0hPeeF6Z+Lop1y6VY7Ho3K+RfhQhlGeV2fRPpdj8z/Mm0OFUVrIewZatZpssakdA
FSKo7pTDzqcnsVltzN/c5SiGSW5w7Fq6wPr4ElvTXq4LTItSJvJyZf3BU3KQas34
rvoooolDWMOn8mkTOzrLuXToZTOA0nO8d92Algr6szNJpb+fWdRhviBuYdb2hx8E
EIDKfkFhzPNFjJzhBG7hpZgdxtqdtSpuZJaDa9MTPkicK+OtzVjaLRzdN8UTPmTU
qx98UNfMLX8LTJzlH165+EkCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 293230314956874465249753591649272522801900
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-16 10:32:45 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-15 10:32:44 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.charterlawsac.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 630795043841877144168737493571121323902849686454244315070323771891043646900934003810410885649282756731495020559560067379314548828779242418702514931344876670936175489629585979000510058323760076216769170593866220812122392741695291274714386124042653455417883648359695436544888629494090642357271018647278053939001324390284322518283628070419541183954638442000193589975676354691669046296450078360564942038592788052646859440643081904252422374937063053897545485851611955848668457831040594303514281236128560728349881026105056558223345719827544079686301707809512385435086327666495037755561643220430226783993408876087912678261241238323808195896380791043015520906492166915683653352104599170290967306320589140873663288642962422667509660327225222948560558782648834058922714966458434505594445509666757525675286693376770198967077933888418603886091009985745545835582739034457077791665413745635373284212094882586973810364619677165313578590349603897554118698742092295505421346820683510150726982104183113248708253388210827258780039883064316045809522685734698613334445528569615721141893738305200753133645770469347667619009180772242270884190778783113017472410608565501353379759054424233887101854504638736887364358728288864568796413787320710597900792100937
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9a9841ee2bc83096de81274c308c76b16f9c8b4e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'charterlawsac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.charterlawsac.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018ee6ae4a090000040300473045022100b1504eb1455c258b015a4882f453b8e132c508a63bb75d9a4481ac639bf20a9302207ac264bf792042332761c85737fe1ade0efbca3f96aede2b74b45a31a21305cd0076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018ee6ae4a19000004030047304502200d27d495801bb7533c24305e137d0a0f8b94a94b36e168265c075bc381856a4a022100c85297784ed5cd3cbd468ed98932217696bd335012b409a303caa4eb984c09f4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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