itvmedia.org

Issued by R3

About this certificate

This digital certificate with serial number 03:92:ed:6b:c6:8f:59:f9:cc:a7:df:3b:d5:45:6f:bc:15:c6 was issued on by Let's Encrypt.

With 15 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=itvmedia.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:92:ed:6b:c6:8f:59:f9:cc:a7:df:3b:d5:45:6f:bc:15:c6
Serial Number (int): 311333670003777218811392028650948766995910
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 58:02:36:4a:32:8d:c4:89:a2:3c:f5:40:25:12:5d:34:02:6e:3d:73
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): e4:d0:e3:db:55:0e:f6:09:56:97:09:ef:4c:a5:50:2e:a3:6c:59:8c
Fingerprint (sha256): 73:18:1c:fa:0a:04:51:87:5c:ef:0f:ea:70:4b:51:bb:7a:57:60:4d:9f:80:6b:07:92:09:1d:1b:fd:58:78:86

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate itvmedia.org

15

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for itvmedia.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

americastrails.com
arbitragereport.com
backroad4x4.com
caferondo.com.enerpactoolgroup.fi
canstocktrade.com.eraseodors.com
hempgi.com
itvmedia.org
kalawaocounty.com
lawobserver.com
mylifeonawebsite.com
personalshopphair.com.internationalhomeschoolday.com
piankatank.com
planetltc.com
privatenetworkmarketing.net.denverwomen.org
www.jesusisthesonofgod.net

Other certificates including the domain name itvmedia.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for itvmedia.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2sEzwfOpbn9xeiMBdW1t
7D5xHggd2snZQFpyW3p8a0LutqL4vdfPEJ50dCS3Al3dY4HogYFyWqKxT9fBTwk9
0MFvu4yOogvpTF4kKu8XJWvfMHr5EuJJ+0N/nSD7Gd4OMc8WDw+1evHHALQ3I5Nd
FJqw+rQVF+brvDgtPtX96XiYuBhVhQPRsxvqFM6laBm5xrAMtPvMMf9nWY2AQn6D
QjT3rEXRgDe3TVO8b0nMcGSuJRehKcwylcwNYhSI/mxMSQ2mU7xCRGJ/YlM1zitj
aBJ67gCpZd118DD0/7fLR3rkqtGJI3yh0Hvqq7Dw4yb8s/4F+oLwqtEJzp012XvC
YwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 311333670003777218811392028650948766995910
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-10 09:45:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-09 09:45:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'itvmedia.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27615222027500002637028635817720529279770547857947584320348481524303616673222545534266989411941718154309126297451845766565935972144358388952638414450940038759692374116389555464383468305342852125673413695770036555437264010169767529540404551951669703022551409950036125302172257291195135916500760867822885566343753430943461160315409450442835288608424808544231855650368966555881410013230624545532375614691496133225302617023804073748177024785258110560714220591821785356508257375290879126820598470216960954204595206087682906449133378229101452842913545571873049565251630606627238919746544855345885803064406281559426201272931
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5802364a328dc489a23cf54025125d34026e3d73
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (373 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'americastrails.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arbitragereport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backroad4x4.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caferondo.com.enerpactoolgroup.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canstocktrade.com.eraseodors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hempgi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itvmedia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kalawaocounty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lawobserver.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylifeonawebsite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'personalshopphair.com.internationalhomeschoolday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'piankatank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'planetltc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'privatenetworkmarketing.net.denverwomen.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jesusisthesonofgod.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c5355754a0000040300473045022051ffb27c024818792d85006f6e81d2ccb856873b2133aed9577396a4c6e7d84c022100b5df886ecef3eb0781e594e80a391e952c29754e698c44ec4c9a2681651b04730076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018c5355754a0000040300473045022100855b6722ddf23dc67e225cbcaed3c2c73c4059e8f3662c669f29f8845d4ed24b0220793921e546e9e9f8f45c4a20bb4db14322459760056cac4ef73c7e8510c77d5d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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