clusterresearch.co

Issued by R3

About this certificate

This digital certificate with serial number 03:f1:31:24:7c:be:9f:97:82:42:d2:6b:4e:ad:3e:5e:15:ba was issued on by Let's Encrypt.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=clusterresearch.co

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f1:31:24:7c:be:9f:97:82:42:d2:6b:4e:ad:3e:5e:15:ba
Serial Number (int): 343410229847828810776129895110636008773050
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 21:5e:7a:58:ae:66:22:aa:62:55:c2:2f:36:09:33:00:13:2b:5c:97
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 20:aa:16:5c:c3:38:e5:a5:2c:12:76:f5:e4:71:06:99:98:3c:00:f1
Fingerprint (sha256): 72:e3:b7:6d:06:21:3a:5a:be:75:f9:ea:dd:cd:11:5f:af:42:fe:a4:52:e8:df:1b:1b:db:0e:55:aa:09:46:2f

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate clusterresearch.co

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for clusterresearch.co

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

clusterresearch.co
clusterresearch.lavenirapps.co
www.clusterresearch.co
www.clusterresearch.lavenirapps.co

Other certificates including the domain name clusterresearch.co

(limited to 100 certificates)

Certificate

The complete raw certificate details for clusterresearch.co in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAruA1og1iQwiYxFrHaZNL
vZiOm/fHKkdY8FZGl2CYCS8YqZGxxZZoBmqpIrBHgfuWFI9p7doa6mIhtu75srmv
wWjumVsf+AmZwfQ0SLXUTtFxrFtRNmQYRK5RoSUAFXTM77ABNZWJ1tQMelmIoXvd
BpU3nN9e1Ee5HcAyZg9lJRTXJNpi3o98gM6Fwm1xygrm7q6wlXCTk/UGGvYametS
VCVLsOqTfKy2k0PQfafd2T7+fePsUe4p7nk18nilW5GvF7900Csmu1YXMAlM5cl/
NZ0BXphU2jqtd9xXL+ZTrnvYRsEFXoeHFUQ1glJmzutZYAxGW8SH9NgiUTCHF0Zv
WwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 343410229847828810776129895110636008773050
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-15 02:33:52 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-14 02:33:51 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'clusterresearch.co'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22076026891198307271820818546154915224336422206499452085671047548599879643174194831175345291672433463242276722423028448351635212225998242163246281899582966565802917173027768416060528074648302339542964808837910993559808302922497984294366957378625130008936080389965420901101789643731503672154664858700623868201116519976063843794096985756210421098971431671501426662661846313619229054205912989913588612696504873089748103330832418188696332276883222555578378161781208260645890795067031049445918030510681254388893535364339799751273068635295994543207272033492552333884213426235334331451401780782129533614478880101299210579803
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							215e7a58ae6622aa6255c22f36093300132b5c97
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (114 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clusterresearch.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clusterresearch.lavenirapps.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clusterresearch.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clusterresearch.lavenirapps.co'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018d0b2eca91000004030047304502210096468f8c3dc45ebef63b213756847ddf7e7777e64a7183097a2d48a47d4d227202200534b4a34b304fe9ebd1b14e26260a5d539bdaf1a2dae533381a3984bef7c1d0007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018d0b2eca9800000403004730450220354a4a1387eb211227fe5a4315137c11e5c2b7b3e0401aebaccfa1041b218d4c022100d84270adba53b4e0e24504e59752bce198d1f119f28e7a589707b88b19380367
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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