matthewjboothpc.org

Issued by R3

About this certificate

This digital certificate with serial number 04:2c:b4:9f:1d:3f:fb:b8:52:f1:52:a1:12:4f:b1:72:f5:35 was issued on by Let's Encrypt.

With 17 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=matthewjboothpc.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:2c:b4:9f:1d:3f:fb:b8:52:f1:52:a1:12:4f:b1:72:f5:35
Serial Number (int): 363661655079263227189398435601167638787381
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 5f:4f:92:99:72:7c:1a:dc:6a:2f:87:53:60:4f:94:b2:4c:af:74:47
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 01:2b:46:5f:dd:4a:48:59:49:44:2f:e7:46:32:c2:10:e7:fa:65:1b
Fingerprint (sha256): 78:67:4c:80:40:85:2b:5a:48:36:9c:f8:f9:27:13:00:7a:bb:e9:a7:44:cb:8f:8f:2b:3e:ba:26:51:ff:e9:0b

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate matthewjboothpc.org

17

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for matthewjboothpc.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

binghamcounty.com
boathousebakery.com
diadecolegiocristiana.com
easyserbia.com
getconnectedct.com
grupociclon.com
internationalwildlifemuseum.info
kurylowicz.com
lgbtqskiing.com
matthewjboothpc.org
pickgoldira.com
privatenewport.org
thetruegospel.com
tilona.com
watermarkgoats.com
weatherreadyroofing.com
www.enhancedgeothermalsystems.com

Other certificates including the domain name matthewjboothpc.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for matthewjboothpc.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGRzCCBS+gAwIBAgISBCy0nx0/+7hS8VKhEk+xcvU1MA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDAyMDcyMDI3MzJaFw0yNDA1MDcyMDI3MzFaMB4xHDAaBgNVBAMT
E21hdHRoZXdqYm9vdGhwYy5vcmcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDK1bGfVt+X6dpel4G3EihBJjzlLSft8S/0Gtr0/wpi9vFPcDYKSvaVujAc
cq02GCvt/3MD2l2vMF0rQTZiLE7pIDkS6WetS1ZIFAV41mXITanLRruMiy9bH5b9
LJmOXG/tcxl3q1y3WxPhQjoiQJkp+BQES1UU5qXa4O6pexMpzYdx1Jg0y8yEfRCW
0erpD2gVQ6QNLNZWtlbGnFmdq/rzjxTZMBAFpjZL8P4GZ+P2mxk1r/EMODjHpdcr
VLY9jn3ibb/fmbsgAiYxb7l3Q/P56Ctu9VKbIIs5FhvauES3iyECTfrG+mrq98QA
peInpNgVcy4rq2BtukmWavtHM0BzAgMBAAGjggNpMIIDZTAOBgNVHQ8BAf8EBAMC
BaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAw
HQYDVR0OBBYEFF9PkplyfBrcai+HU2BPlLJMr3RHMB8GA1UdIwQYMBaAFBQusxe3
WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0
cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5j
ci5vcmcvMIIBcQYDVR0RBIIBaDCCAWSCEWJpbmdoYW1jb3VudHkuY29tghNib2F0
aG91c2ViYWtlcnkuY29tghlkaWFkZWNvbGVnaW9jcmlzdGlhbmEuY29tgg5lYXN5
c2VyYmlhLmNvbYISZ2V0Y29ubmVjdGVkY3QuY29tgg9ncnVwb2NpY2xvbi5jb22C
IGludGVybmF0aW9uYWx3aWxkbGlmZW11c2V1bS5pbmZvgg5rdXJ5bG93aWN6LmNv
bYIPbGdidHFza2lpbmcuY29tghNtYXR0aGV3amJvb3RocGMub3Jngg9waWNrZ29s
ZGlyYS5jb22CEnByaXZhdGVuZXdwb3J0Lm9yZ4IRdGhldHJ1ZWdvc3BlbC5jb22C
CnRpbG9uYS5jb22CEndhdGVybWFya2dvYXRzLmNvbYIXd2VhdGhlcnJlYWR5cm9v
ZmluZy5jb22CIXd3dy5lbmhhbmNlZGdlb3RoZXJtYWxzeXN0ZW1zLmNvbTATBgNV
HSAEDDAKMAgGBmeBDAECATCCAQMGCisGAQQB1nkCBAIEgfQEgfEA7wB2ADtTd3U+
LbmAToswWwb+QDtn2E/D9Me9AA0tcm/h+tQXAAABjYV4CNIAAAQDAEcwRQIhAIxE
7XG9JhTBfrTBr+em51wWhfSLm8drMlGARJAJNJknAiBvqd9NLk3dyzFF2gvUUlU5
TYBKhctPslfd1UEvueC/7QB1AEiw42vapkc0D+VqAvqdMOscUgHLVt0sgdm7v6s5
2IRzAAABjYV4CNYAAAQDAEYwRAIgG9ZAJmdVNWslVkgfDVFobI+D6Iaw0x74IgKn
MdVY2KUCIECl+K7rJwmVlcNLi+LxFd6C7kmROAR0XnJTJlC4JoESMA0GCSqGSIb3
DQEBCwUAA4IBAQB1Pen+rfHkYeo5QHQIvZej2yJULsQayH0UzBcx7k6sZYHltzkS
xCR/rAY6S+XIuKF/BigrUME+dqHOefljNTdQiauEDAQ4SCa8pKcsxvUUfPhSU95w
TJTzQhDBZpiEO/DhVnJGQuPt62uXIOXlOwi5K9nA+xuvhkkPTVnyGzvU6Vf4yiYq
dqSu8BgTilKY4a0DopU+VGSoCF6HO1iGX9DkOl2MfmcnR2Av1kdiv7T/qbl6+Aka
pgp8ZQqGLNakl+572b0kdxO5p6FX8s1/Ix0wkiY24YFOij8sYDjE3Gi44CFw6uBs
9/5fGqQQBUStF5EBLKIpOXWXa1yPD3l/Fjvr
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAytWxn1bfl+naXpeBtxIo
QSY85S0n7fEv9Bra9P8KYvbxT3A2Ckr2lbowHHKtNhgr7f9zA9pdrzBdK0E2YixO
6SA5EulnrUtWSBQFeNZlyE2py0a7jIsvWx+W/SyZjlxv7XMZd6tct1sT4UI6IkCZ
KfgUBEtVFOal2uDuqXsTKc2HcdSYNMvMhH0QltHq6Q9oFUOkDSzWVrZWxpxZnav6
848U2TAQBaY2S/D+Bmfj9psZNa/xDDg4x6XXK1S2PY594m2/35m7IAImMW+5d0Pz
+egrbvVSmyCLORYb2rhEt4shAk36xvpq6vfEAKXiJ6TYFXMuK6tgbbpJlmr7RzNA
cwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 363661655079263227189398435601167638787381
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-07 20:27:32 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-07 20:27:31 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'matthewjboothpc.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25605513961883005229656739393177482741326076517691475512952726285443839207791459704405383832197813305866648431016486602983709240460666580432142440327842725679159243558814259291985661700777641383335522902757781981838729883638282743707345336604033624314077188720234276354842879800643186058632580219535420677255504341972694833318720873689917239752526088442014624762277482483768041080269557070898430103675764542767693201362609326486361519630685027249732252468286968132446016042023088655987351028230770481840227942666125963991849707184857725876346929343373724656743789522894656216163974916826311299491273292486999685677171
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5f4f9299727c1adc6a2f8753604f94b24caf7447
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'binghamcounty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boathousebakery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diadecolegiocristiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'easyserbia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getconnectedct.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grupociclon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'internationalwildlifemuseum.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kurylowicz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lgbtqskiing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'matthewjboothpc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pickgoldira.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'privatenewport.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thetruegospel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tilona.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watermarkgoats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weatherreadyroofing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.enhancedgeothermalsystems.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018d857808d200000403004730450221008c44ed71bd2614c17eb4c1afe7a6e75c1685f48b9bc76b32518044900934992702206fa9df4d2e4dddcb3145da0bd45255394d804a85cb4fb257ddd5412fb9e0bfed00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d857808d6000004030046304402201bd640266755356b2556481f0d51686c8f83e886b0d31ef82202a731d558d8a5022040a5f8aeeb27099595c34b8be2f115de82ee49913804745e72532650b8268112
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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