flanaganfilm.org
Issued by R3
About this certificate
This digital certificate with serial number 03:e2:17:05:e4:45:91:9f:02:9c:ea:cd:e8:d6:a9:1c:a2:cc was issued on by Let's Encrypt.
With 17 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=flanaganfilm.org
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 03:e2:17:05:e4:45:91:9f:02:9c:ea:cd:e8:d6:a9:1c:a2:ccSerial Number (int): 338271275554701378825843144193599132705484
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: a4:20:8f:bb:e5:f8:e3:19:7c:ef:29:b6:7e:47:78:79:4a:2e:d6:d0
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 18:87:8a:25:08:c0:9b:34:08:1a:ae:c0:4d:bb:e0:71:94:8e:9b:ae
Fingerprint (sha256): 70:71:b7:db:42:89:c9:83:ff:99:b3:07:d6:b4:b6:30:34:24:18:77:af:11:28:82:bb:3f:ab:cf:c6:39:3d:2d
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate flanaganfilm.org
17
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for flanaganfilm.org
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
bigboardovecesko.com
datamyheart.com
duersata.com
ericschocolateexpress.com
flanaganfilm.org
floatationpods.com
freedomsphoenix.studio8424.com
houghtoncounty.com
investforvip.com
maleunderwear.com
myfluids.com
neuroexperiment.com
physicaldigitalre.com
rejectporn.com
rxsugaristhesugarvaccine.com
shipwreck.press
tranquila.com
datamyheart.com
duersata.com
ericschocolateexpress.com
flanaganfilm.org
floatationpods.com
freedomsphoenix.studio8424.com
houghtoncounty.com
investforvip.com
maleunderwear.com
myfluids.com
neuroexperiment.com
physicaldigitalre.com
rejectporn.com
rxsugaristhesugarvaccine.com
shipwreck.press
tranquila.com
Other certificates including the domain name flanaganfilm.org
(limited to 100 certificates)
Certificate
The complete raw certificate details for flanaganfilm.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGOTCCBSGgAwIBAgISA+IXBeRFkZ8CnOrN6NapHKLMMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDA0MjcwODU3MjJaFw0yNDA3MjYwODU3MjFaMBsxGTAXBgNVBAMT EGZsYW5hZ2FuZmlsbS5vcmcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDadc2Cgd23SZ+AiWO0IQYEH0/B9UmzY6w/r8hltsqzChRft7oiLKYFqlFgtyTR H2P8D13lapvRpEfxke5SGS23mIqVCpEavtsLJwyut6jSwhFKoRkauCzewK/nhzlk GuF2Ngxw+HpfcSxRPmfjZmdhQHVI0oYw8sDzyNcuyrgN6awbgNE5kSjOBAn4Lady hA0TgdvzBDVA4i3Ms6FnBOngeEXiCAm51XZ3ozGErQyzeGIjMXMvw88hAl7jFqOm XTs/W6n6VcjnaLa+pPzeyIxjGmDl+nEx/i68Kdn5G6JbN66WOhX5oauq39nJD+Wi ZUb+L2UCPY1xqhXt6aYGBN2LAgMBAAGjggNeMIIDWjAOBgNVHQ8BAf8EBAMCBaAw HQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYD VR0OBBYEFKQgj7vl+OMZfO8ptn5HeHlKLtbQMB8GA1UdIwQYMBaAFBQusxe3WFbL rlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0cDov L3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5jci5v cmcvMIIBZAYDVR0RBIIBWzCCAVeCFGJpZ2JvYXJkb3ZlY2Vza28uY29tgg9kYXRh bXloZWFydC5jb22CDGR1ZXJzYXRhLmNvbYIZZXJpY3NjaG9jb2xhdGVleHByZXNz LmNvbYIQZmxhbmFnYW5maWxtLm9yZ4ISZmxvYXRhdGlvbnBvZHMuY29tgh5mcmVl ZG9tc3Bob2VuaXguc3R1ZGlvODQyNC5jb22CEmhvdWdodG9uY291bnR5LmNvbYIQ aW52ZXN0Zm9ydmlwLmNvbYIRbWFsZXVuZGVyd2Vhci5jb22CDG15Zmx1aWRzLmNv bYITbmV1cm9leHBlcmltZW50LmNvbYIVcGh5c2ljYWxkaWdpdGFscmUuY29tgg5y ZWplY3Rwb3JuLmNvbYIccnhzdWdhcmlzdGhlc3VnYXJ2YWNjaW5lLmNvbYIPc2hp cHdyZWNrLnByZXNzgg10cmFucXVpbGEuY29tMBMGA1UdIAQMMAowCAYGZ4EMAQIB MIIBBQYKKwYBBAHWeQIEAgSB9gSB8wDxAHYAPxdLT9ciR1iUHWUchL4NEu2QN38f hWrrwb8ohez4ZG4AAAGPHvzqkgAABAMARzBFAiB9x9R1LoXJSXoQvh60rBB3Xh7a p+Pjxvz5mqp2ezi95wIhALVEj46BjVD8D/BzcoClcJdBosb8punOhSKrxdWS63f8 AHcA3+FW66oFr7WcD4ZxjajAMk6uVtlup/WlagHRwTu+UlwAAAGPHvzrVQAABAMA SDBGAiEAqPOHPy2wIV6loqDO7hmsyFHUXxY1YCdfCX9PZrNIx+UCIQCukP5gXhSa p65ptT640I0T5R2SAtJeJoceuMtRecrz2zANBgkqhkiG9w0BAQsFAAOCAQEAMUG3 E2Cu8t+Mn28y8Auc0QG5+Sd2uolbFOAnNl1DuAEDKxHWx8TXyhfBgKLwZddbvkTZ T0CIe7tUamevLnLmfkxOkj1XDh4H88e1tgieWp944Mq4PUHytN4cTUlqJdJpTZWC W6ANqfENv/Uoif5zLrPAUYioPDyx/e0it8TRYu+pHptg3QBrsG/H9+cccDbBT7EH xGS2es2r3veN4ZMImdpOGgGIV9VqYH2luLNbbHJ1J6e4ockMSsqgpjfEdNvzlGv1 39GwZ9Z7ZalkATLVRjYWQN0PwD3JWhhkcZ3jkpwHMSWYLOmWGFJ0tviel4UQQcqo iYCCVp1u1SS3ZvmMRA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2nXNgoHdt0mfgIljtCEG BB9PwfVJs2OsP6/IZbbKswoUX7e6IiymBapRYLck0R9j/A9d5Wqb0aRH8ZHuUhkt t5iKlQqRGr7bCycMrreo0sIRSqEZGrgs3sCv54c5ZBrhdjYMcPh6X3EsUT5n42Zn YUB1SNKGMPLA88jXLsq4DemsG4DROZEozgQJ+C2ncoQNE4Hb8wQ1QOItzLOhZwTp 4HhF4ggJudV2d6MxhK0Ms3hiIzFzL8PPIQJe4xajpl07P1up+lXI52i2vqT83siM Yxpg5fpxMf4uvCnZ+RuiWzeuljoV+aGrqt/ZyQ/lomVG/i9lAj2NcaoV7emmBgTd iwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 338271275554701378825843144193599132705484 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-27 08:57:22 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-26 08:57:21 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'flanaganfilm.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27578041194856705874586518470581282447775997503795378205708666824616104844573908459455046782305311096636142353274286011859648062105408311077882202687868390408350394766429857190643327100228895900728351763465000493672251410119298970064671765600955764760938691719947719543148712216241901919231951912713372915808322731286748414242716802116566758586836765824668632136463175471621287319461500960084565608573153220142942783598460548855853780396623772677398730505104710545422323924757791382432296760430653898732163216354097541943041889060274072134783609988027058720605694191383071285423382057664080624259439120011628902669707 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) a4208fbbe5f8e3197cef29b67e4778794a2ed6d0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (347 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bigboardovecesko.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'datamyheart.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'duersata.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ericschocolateexpress.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flanaganfilm.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'floatationpods.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freedomsphoenix.studio8424.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'houghtoncounty.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investforvip.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maleunderwear.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myfluids.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neuroexperiment.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'physicaldigitalre.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rejectporn.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rxsugaristhesugarvaccine.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shipwreck.press' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tranquila.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f10076003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018f1efcea92000004030047304502207dc7d4752e85c9497a10be1eb4ac10775e1edaa7e3e3c6fcf99aaa767b38bde7022100b5448f8e818d50fc0ff0737280a5709741a2c6fca6e9ce8522abc5d592eb77fc007700dfe156ebaa05afb59c0f86718da8c0324eae56d96ea7f5a56a01d1c13bbe525c0000018f1efceb550000040300483046022100a8f3873f2db0215ea5a2a0ceee19acc851d45f163560275f097f4f66b348c7e5022100ae90fe605e149aa7ae69b53eb8d08d13e51d9202d25e26871eb8cb5179caf3db . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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