reginaangelorum-press.org

Issued by R3

About this certificate

This digital certificate with serial number 03:ac:d0:47:84:a9:cf:a8:29:4a:14:1b:e3:be:5a:06:db:7e was issued on by Let's Encrypt.

With 12 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=reginaangelorum-press.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ac:d0:47:84:a9:cf:a8:29:4a:14:1b:e3:be:5a:06:db:7e
Serial Number (int): 320142275672614267968383165082135066762110
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 4d:9f:1f:cd:0c:1d:2a:66:00:45:33:4f:b3:08:9e:e9:c0:c0:cd:57
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 9f:a5:60:f9:e2:fa:ec:25:da:4c:fa:bf:c4:dc:04:e6:95:36:ad:57
Fingerprint (sha256): 70:a5:c9:3b:ce:d0:df:7f:78:61:37:36:9f:66:8b:f2:01:b7:db:12:1d:e4:c0:2e:39:ff:c8:cc:72:37:c2:90

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate reginaangelorum-press.org

12

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for reginaangelorum-press.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bestsanantoniolawyers.com
canibuild.co.nz.criticalcarestaffing.com
domelogos.com
fargoadvertisingagency.com.masturbucks.com
gogreenvirginia.com
jerseyshoreroofing.com
kemrock.com
kingman.net
krautcutters.com.lewisburgbypass.com
nfttheocracy.com
reginaangelorum-press.org
rikimbili.com

Other certificates including the domain name reginaangelorum-press.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for reginaangelorum-press.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+KlU5w9uHOMh7aw8DH+
xhFIUkkDPg631Nex7UaFWmjJC2cJrcgej9h57YzxcojTUKltmHrGxVEnubhr/3/Z
UUlsqJvuYKUwbhy4E0rPWmmCrXwUZeYbznbBW+52vjz5EoeoisVqdvbiUCfx/CKF
7iFSg/c7cAjPG1PAov5KF88rst5If15wPJf1eNdjSglJbFDnAcCSoYsTPLBGDweE
YWyjjxxRNe2Z8OfGx6QWm/KQ0fgdM9rWFxJPgt29l+OD6OcoP0WzWd4Svr7J4aYf
ekFQcoiFxKZ0X4p+wIU1v7RxNbeLl5SFFUL9ybsMb+KOtz/5Abtly4qOi4UY1aC6
WwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 320142275672614267968383165082135066762110
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-31 09:58:56 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-30 09:58:55 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'reginaangelorum-press.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19678700482663579047617764241209224809133565349622533917454459013673179087395448044206424715303435977659809498936513470677195065543038268095698263588979715378560298506127341432745461174533280055927268326561099289026013907268137291576006885582777465817433439070763263444465312194812980115143432710698331071530611760062067477855832183752449436958128768395607046513804243435796854525705713216325062812203810184630068532325632066512091537861320490639512425604863882992025463450144792259647946154818169736916654873566934807010162473790278908117302620743147722263255892262112928621757182851101751103122428333029561940884059
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4d9f1fcd0c1d2a660045334fb3089ee9c0c0cd57
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (301 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestsanantoniolawyers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canibuild.co.nz.criticalcarestaffing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'domelogos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fargoadvertisingagency.com.masturbucks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gogreenvirginia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jerseyshoreroofing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kemrock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kingman.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'krautcutters.com.lewisburgbypass.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nfttheocracy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reginaangelorum-press.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rikimbili.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee0075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018cbf86e138000004030046304402202282cc99daee389f344645de95810f16d906715b7905ceac338c6da47fe8188002205bddb174d5913cba5cec099bd89161c9b9baa1d9160dca08d8db82dd8a2d29df00750029d03a1bb674aa711cd3035b6557c14f8aa78b4fe8389449eca453f944bd24680000018cbf86e2940000040300463044022058f2ed570db72a2c69ac747c6393fbe62d78bea38be609d8a55efc853137db3f02200a9e9baac55b604ea84598c037e1c771a4ceda4668e6abd58d1219d0506ba6c1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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