bettiepardee.org.gym.vc

Issued by R3

About this certificate

This digital certificate with serial number 04:63:da:5a:0c:63:95:bc:1c:bc:1a:44:b3:3e:fa:1d:ae:e5 was issued on by Let's Encrypt.

With 15 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=bettiepardee.org.gym.vc

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:63:da:5a:0c:63:95:bc:1c:bc:1a:44:b3:3e:fa:1d:ae:e5
Serial Number (int): 382427337313291118277095106545373079776997
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: ed:1d:9d:32:e6:55:54:d4:c7:98:e5:09:20:28:e1:ea:e2:d3:8b:5d
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): b3:ff:32:37:a6:a0:b7:5e:ca:5a:38:87:0d:49:c1:93:a6:48:64:ff
Fingerprint (sha256): 79:c0:4e:de:83:f8:23:39:ed:58:a4:17:7d:25:07:68:c2:db:81:00:66:1a:d8:53:57:06:18:be:12:da:92:2f

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate bettiepardee.org.gym.vc

15

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bettiepardee.org.gym.vc

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bettiepardee.org.gym.vc
cardioga.com
distinctlymontana.org
flote.app.ev.cool
freespeechsystem.com
growmyleadership.info
hireremotedevteam.com.hempropes.com
mesa.info
oliveratkinson.us.clermontpressurewasher.com
quigleyeye.net
raubling.com
rubee.ai
taxfirmontario.com
voirdire.com
www.banaban.org

Other certificates including the domain name gym.vc

(limited to 100 certificates)

Certificate

The complete raw certificate details for bettiepardee.org.gym.vc in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAypOWqD4LR5uuMu0K9zps
eERqFvRgKXYCyBvrQRgSe1W1cpwBShHuDePbrkP6iEbBnH1rIxYjd7ythp7i1bi0
1mO5Spdse/kYu9Mu0klzkf2P02HXzrzI7uv01JHB7UBeaAWPxACZ/EbqqwbyWKtq
WUklPFTz+ay+seRG01DxfaBo3VMMSZhbzzB0hWIztOi9f9mWZK8Mdkyp0/lstkHe
rklyWskXpVr4H4YZur6l97kUZzs+1VYgsE3zZI4ptm8ZqmFdrhF4eONzn0bKBzil
sLi9anfkf9SeOnCTT5Bnab3cnYQHwBhzUL34M8Cf9vrFQcFTijNKG/AHWJGt5Rqf
iwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 382427337313291118277095106545373079776997
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-04 12:36:10 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-03 12:36:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bettiepardee.org.gym.vc'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25572916207294647990957718600880073704089535606472956700638343261204100459386934535057677977090126810292333453570422859130232126022600480964471560141968576994514565564965524945955442337129657827701152345912985420232950738225854984824550342212641841479413034507183045241374800306522466335894285541193926325851015962748248952612800698849017343926229201220394297524014891621633278204562231981207558870134169746826254963993077449407884042767152953794812133451230329149517127865626806195117802376842364014438529290460779111355676078862837921194577032465848966342612694259656574914742690093488121818175409726668343653080971
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ed1d9d32e65554d4c798e5092028e1eae2d38b5d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (315 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bettiepardee.org.gym.vc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cardioga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'distinctlymontana.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flote.app.ev.cool'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freespeechsystem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'growmyleadership.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hireremotedevteam.com.hempropes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mesa.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oliveratkinson.us.clermontpressurewasher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quigleyeye.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'raubling.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rubee.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taxfirmontario.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'voirdire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.banaban.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018cd4b0450d0000040300473045022075ccb795260ccfe3e8c1e2bf6569cc742a3caadbf6e4ad4038531e39390caf3c022100a8faf902e6f8b4d45055b1b112dd891fae3dd56ecf62f6bd4c4863221882077d00760029d03a1bb674aa711cd3035b6557c14f8aa78b4fe8389449eca453f944bd24680000018cd4b0460d0000040300473045022100a890697493cb99aaad36e9b7e0da22e03ae6c07526b42fbfeb2b5506973f0c1102201fa85098baf877180d50f01ba5bc44e6955f583b4222384bc9129d26684c7d91
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00723500a3d549ee4f3e8aeb9f532f05e6d56ab7eaa86095ee65e38aaf011ff96b798ca46097c8843e53d9004fb47528ff3460ec0ae03f39ddef196ce0cbf2041ca84cdac5ca4c4bb930648dc94b37947cb1f7b2905a2b96775bffe3726b6c97cea9928e190d6f92f1231ef5ea82e5f1b697cf894bc1097f61e76dbfe04dfc1f24053ee6fc4495cd782d756141380c8408a2d187fef2d6356f49351e08e1cfe2cefe520f08dd29f61634791c00b3e5ee1238ea4824b45c8ca7d3ae9808228de66707ae4c9d7482a3a5c2962c5bf105c94b973421e787969a2023cb8fe682868e1471e81cf4a8cbfd538ce049460052bd8e3f48b950c2fb3ef4e3cc8e6bceec7648