faqtruth.org

Issued by R3

About this certificate

This digital certificate with serial number 04:cd:20:c1:cd:d8:bb:f7:d0:db:1f:78:74:02:bb:f0:20:2f was issued on by Let's Encrypt.

With 17 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=faqtruth.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:cd:20:c1:cd:d8:bb:f7:d0:db:1f:78:74:02:bb:f0:20:2f
Serial Number (int): 418250570530057611265634523995009404903471
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 4e:f2:70:b9:3e:71:df:5c:7a:6e:7d:01:67:8e:3e:76:61:20:19:92
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 35:14:57:e4:dd:49:be:aa:af:09:71:aa:1e:8f:f3:92:a5:39:17:8d
Fingerprint (sha256): 78:bd:26:e2:f5:ae:7d:00:c3:5c:79:0d:53:3e:0b:c4:7e:48:5e:5d:8e:3e:91:bb:8b:3b:06:8d:bf:a2:fe:f2

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate faqtruth.org

17

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for faqtruth.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bonus2buyers.com
canibuild.in
ccrdiver.com
computernerd.io
ecurrencyexchange.net
faqtruth.org
fkh.co.in
koreastockfund.com
luxmatica.com
ostomyintimates.com
pottawatomie.com
reginaangelorum-press.org
seeemeee.com
takeactionusa.net
tenicorusa.com
varnd.com
wyattpark.com

Other certificates including the domain name faqtruth.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for faqtruth.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIF/TCCBOWgAwIBAgISBM0gwc3Yu/fQ2x94dAK78CAvMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDA1MDgwNTA2MjNaFw0yNDA4MDYwNTA2MjJaMBcxFTATBgNVBAMT
DGZhcXRydXRoLm9yZzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKP0
u7nv9Bmy49aaiyA8UQumlYQ4NLJYC56BDi7TulvtVsO+4rfDCTpzI28kXH3PbOEY
keFdKVAH8RUybFmKcQqDn3VPAMgxx3FK5XOB6uoHGSqxyfVjxY+0WJ42J/sWCDZg
E2OxJ4KijkmJN5xX1tQD75Ig1HEleHiKmg39M7kOqXQ2AUHNMP9A35WGDf9QCUM0
4EZ5epS7iI0NyF2BM32SNhmAhm/RGviXCwcW9l/mdC95K5UvxrmQ/aKxMTgSO9oI
wybqkTXHrdvr6eztSyLBu1cHZ08WLty0JAbcAqj+3xJgNAtjNrIvgZYuQ9v3ec40
AcdaL7tpxfFYWknRtNcCAwEAAaOCAyYwggMiMA4GA1UdDwEB/wQEAwIFoDAdBgNV
HSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4E
FgQUTvJwuT5x31x6bn0BZ44+dmEgGZIwHwYDVR0jBBgwFoAUFC6zF7dYVsuuUAlA
5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRwOi8vcjMu
by5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNyLm9yZy8w
ggEsBgNVHREEggEjMIIBH4IQYm9udXMyYnV5ZXJzLmNvbYIMY2FuaWJ1aWxkLmlu
ggxjY3JkaXZlci5jb22CD2NvbXB1dGVybmVyZC5pb4IVZWN1cnJlbmN5ZXhjaGFu
Z2UubmV0ggxmYXF0cnV0aC5vcmeCCWZraC5jby5pboISa29yZWFzdG9ja2Z1bmQu
Y29tgg1sdXhtYXRpY2EuY29tghNvc3RvbXlpbnRpbWF0ZXMuY29tghBwb3R0YXdh
dG9taWUuY29tghlyZWdpbmFhbmdlbG9ydW0tcHJlc3Mub3JnggxzZWVlbWVlZS5j
b22CEXRha2VhY3Rpb251c2EubmV0gg50ZW5pY29ydXNhLmNvbYIJdmFybmQuY29t
gg13eWF0dHBhcmsuY29tMBMGA1UdIAQMMAowCAYGZ4EMAQIBMIIBBQYKKwYBBAHW
eQIEAgSB9gSB8wDxAHcAPxdLT9ciR1iUHWUchL4NEu2QN38fhWrrwb8ohez4ZG4A
AAGPVs9nRwAABAMASDBGAiEAhMT8rikT0XN2EisJn0OGvZu4NgORrhRoQ2Jvipkj
wO0CIQCNwWNnby/UA+tSJVCv+QJfyGvloPkYcspL1D85cmuy/QB2AEiw42vapkc0
D+VqAvqdMOscUgHLVt0sgdm7v6s52IRzAAABj1bPZ0wAAAQDAEcwRQIhAJAcw5gl
iBtMltgStHGes5ZLlO0ydyAWBTXHvt8jFKMxAiBwADvwyx5Yp8ZLmgGjJsN4xhVl
Xy1ms6tfuP9mmtqQ4zANBgkqhkiG9w0BAQsFAAOCAQEAkpB49TQ0YveQ/c334081
2xtxzAQvAUO8dWfby3+z8N8HU/Ne5ajKhiseUQuPS1TSBDRe5/17kWhDbFGSqb9J
22fvn9jx8Z9wYPIg+1eTwwY17vJLFhm9NdmkOccFmPiAb59RtfOOSVWzquQOcQoT
diHKoO8s3G/hVLfNWsd5SNOFL4L8iDhrvNT2cqjHxldgaW/kkhWlNFlrx81Gd5gN
4YvZIwSXN8Is4EMzf4i+OAegDM7b4EaZrAo4aKvwOWfwCbeKAbkbyIUp6ACAkxhF
BAKhPd+E4lMhtbjG0E17v4DOFi2GVHQlOs/liXjO268FCOZj+2o/0XYuaFtmBuWW
/A==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/S7ue/0GbLj1pqLIDxR
C6aVhDg0slgLnoEOLtO6W+1Ww77it8MJOnMjbyRcfc9s4RiR4V0pUAfxFTJsWYpx
CoOfdU8AyDHHcUrlc4Hq6gcZKrHJ9WPFj7RYnjYn+xYINmATY7EngqKOSYk3nFfW
1APvkiDUcSV4eIqaDf0zuQ6pdDYBQc0w/0DflYYN/1AJQzTgRnl6lLuIjQ3IXYEz
fZI2GYCGb9Ea+JcLBxb2X+Z0L3krlS/GuZD9orExOBI72gjDJuqRNcet2+vp7O1L
IsG7VwdnTxYu3LQkBtwCqP7fEmA0C2M2si+Bli5D2/d5zjQBx1ovu2nF8VhaSdG0
1wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 418250570530057611265634523995009404903471
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-08 05:06:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-06 05:06:22 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'faqtruth.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20697526200518848682971835497500182303545940114113030015385944847806054249723757316497490894552411517893262643864987838567778281097765571596262657509881981362539987252139340928125553810924400349494110623405086800959208398114285809147473540971711721324262556084676983032382750177206510777680775288411132597986270155233248298504128242404623210190481257420844438137663189086740451209077166550970800785689921835347153003770661425435270735515878093538005973677582339144991043981416513865203682654875544222280333656018507608707453250080354057131878930790829915453525735391738536519705520786636298112892344614258621218403543
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4ef270b93e71df5c7a6e7d01678e3e7661201992
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (291 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bonus2buyers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canibuild.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccrdiver.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'computernerd.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecurrencyexchange.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faqtruth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fkh.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'koreastockfund.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luxmatica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ostomyintimates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pottawatomie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reginaangelorum-press.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seeemeee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'takeactionusa.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tenicorusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'varnd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wyattpark.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018f56cf6747000004030048304602210084c4fcae2913d17376122b099f4386bd9bb8360391ae146843626f8a9923c0ed0221008dc163676f2fd403eb522550aff9025fc86be5a0f91872ca4bd43f39726bb2fd00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018f56cf674c0000040300473045022100901cc39825881b4c96d812b4719eb3964b94ed327720160535c7bedf2314a331022070003bf0cb1e58a7c64b9a01a326c378c615655f2d66b3ab5fb8ff669ada90e3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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