intentionallegacy.org

Issued by R3

About this certificate

This digital certificate with serial number 03:4f:5a:bc:18:e9:9a:05:05:8c:b0:65:48:a6:75:98:d0:43 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=intentionallegacy.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:4f:5a:bc:18:e9:9a:05:05:8c:b0:65:48:a6:75:98:d0:43
Serial Number (int): 288339771958750584645446152141272721707075
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: c4:a3:e7:1b:70:ef:9f:4c:50:6d:4a:d6:a1:5c:45:4e:99:b8:b5:e5
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): f7:9e:22:52:e0:7c:5f:a9:dc:42:2b:c5:e5:9c:f1:23:6d:39:25:13
Fingerprint (sha256): 78:49:d1:ed:6f:c5:c8:61:61:85:06:f5:8a:12:96:d9:33:2d:7c:4b:94:e0:dc:10:bb:12:3a:05:f6:e1:fd:e6

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate intentionallegacy.org

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for intentionallegacy.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

intentionallegacy.org
www.intentionallegacy.org

Other certificates including the domain name intentionallegacy.org

(limited to 100 certificates)
itronadapters.com
intentionallegacy.org
eatonadapters.com
intentionallegacy.org
siemensadapters.com
geadapters.com
intentionallegacy.org
intentionallegacy.org
andrewbmatthews.com
itron.susiadapters.com
intentionallegacy.org
matthewsmortar.com
eatonadapters.com
eatonadapters.com

Certificate

The complete raw certificate details for intentionallegacy.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkwexqhY0fq3fEH/PjdaT
sspHE64lBDX95ERK/wtZE0hYZmXq4DvbbrRiVKzyF2Ytuf7A5LKCKpCDL4fmadBO
wd095gCMSewAsX5eDiFoVcrM9HCp6otuaN+YKtoHasISXrF1vSqyvpMtY5PbWSLX
LGaKFxf6gLysHc7rpSj3WtKiE76mMaXoCJ2cdgwuiBgu+q1Pa9JBA3O1tS/F7JYZ
uKzTnJcdx/Ny4H53NAOQJ4ll+Tk6gL6GnKNm7WvCtjTTxyGR/rftMPc1cX/yup3w
aCc3wzx0/1/le5sPp2b3M8r0wsY1klv7IlRXueHu4NYx2WZsoMRe3kWwnC6qDcSO
iQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 288339771958750584645446152141272721707075
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-28 22:13:45 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-26 22:13:44 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'intentionallegacy.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18560824883589946594007334774051955721444285135269459185291527553575449067836108414864554333928627312054529871479605694866443162626513196557115736020322203171117898927246530229475266668328503411117098083610122036419100046723956537214795434118832247400872692217454217680055915418452980922226989187630342466727387225550687229783718811193603640582980809068163547759154423733391336440091383898346682513070479159646921503669312552997502199924686472226546731350105273547813910535130419586878395752075271574650430745913625747396023280658889707089967779238857972896779001963638838780862716238452829334933996589722675439767177
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c4a3e71b70ef9f4c506d4ad6a15c454e99b8b5e5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intentionallegacy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.intentionallegacy.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018b78909d380000040300483046022100d07b0a1e77f34423e8fc345bec6174f1cbae61c44affbadc22c74887a17d11b4022100819e1849df3ece48ca28fcc915b841d18964f8d03389b167f244a9013b39c804007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018b78909d2f0000040300463044022016181dcdbad837192be5083c81f6b6d21605c91dd212b89ed9577b6038a0825602205c11d916f3c13b9537fde2f264b9863c1839c75c208056c67ae3c5a90d7e0e92
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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