www.2011-living-archives-conference.grazian-archive.com

Issued by R3

About this certificate

This digital certificate with serial number 04:26:29:58:7b:80:e0:01:bc:af:a7:6f:0c:70:17:86:26:a1 was issued on by Let's Encrypt.

With 23 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.2011-living-archives-conference.grazian-archive.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:26:29:58:7b:80:e0:01:bc:af:a7:6f:0c:70:17:86:26:a1
Serial Number (int): 361434831444934293606876442001190156641953
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 42:41:d1:0a:f8:d5:57:1e:be:98:0a:1e:68:a6:bd:92:17:06:2c:c5
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): fc:a2:87:62:97:36:b3:7b:7e:58:ea:36:9c:64:03:c1:f0:6b:ce:1e
Fingerprint (sha256): 7c:d4:8d:ef:aa:22:71:4b:ff:ae:fa:8c:63:75:df:60:95:a2:e5:90:cd:7f:0e:fd:45:44:2b:e3:ac:5d:30:ad

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.2011-living-archives-conference.grazian-archive.com

23

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.2011-living-archives-conference.grazian-archive.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

2008-paris-conference-org.grazian-archive.com
2008-paris-conference.org
2009-q-conf-kandersteg.grazian-archive.com
2011-living-archives-conference.grazian-archive.com
americashistoryretold.grazian-archive.com
autodiscover.2008-paris-conference.org
cosmicheretics.grazian-archive.com
cpanel.2008-paris-conference.org
cpcalendars.2008-paris-conference.org
cpcontacts.2008-paris-conference.org
graziana.grazian-archive.com
mail.2008-paris-conference.org
naxos-home.grazian-archive.com
webdisk.2008-paris-conference.org
webmail.2008-paris-conference.org
www.2008-paris-conference-org.grazian-archive.com
www.2008-paris-conference.org
www.2009-q-conf-kandersteg.grazian-archive.com
www.2011-living-archives-conference.grazian-archive.com
www.americashistoryretold.grazian-archive.com
www.cosmicheretics.grazian-archive.com
www.graziana.grazian-archive.com
www.naxos-home.grazian-archive.com

Other certificates including the domain name grazian-archive.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.2011-living-archives-conference.grazian-archive.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7kzZH8M+RRHY0YdKiOk
kHV5siIomE1apazdc0Quu+ja8H/OEvZK5YM1+y1p/U/kSL4tS38feBvgkboqInsz
AeHiFXiHYVWfXBpRd47+UMyHUNGdMAaXXlHmIQ8G/pu3iFSHQjMwhasoomxSlrxa
fdcvbh9VQn3lnFXcBOoIeD+wpB2TTPKWNVK6VhKTerYcYOB1r4nw5rwd+3Stmkdy
2YhryvsYQ5cQg2n0b4zSPNh3WuNZ+JYGJEJHPWpg5FhP1dCVAlRyVfz1QOris9f7
62mc1qPqcsooBc3hpPxQZR4qYujQ7WlGL7XBNA3AhLcWzTFwUWAwtO57IvRAhY1I
1wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 361434831444934293606876442001190156641953
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-27 08:29:46 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-25 08:29:45 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.2011-living-archives-conference.grazian-archive.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24202842143190570908309891243578406297482318269281307635058064210889016352787306728627468982095719463400509567353992381152450907594782683641212006870887509688356412978036154107410827976113669723695631925307472011847576197441872106363011866610853855300454127821911969960642798808962144198834012000226291852467749472932568984047303187814093576840512956006719802270384418553290758344582960314177148268974614128122530766743924350340783980198657714936109030316899357835195827775269974229427114892615253716064772077342578120725447292511494213936742050975207028543339433531883231895277342247974607599547247673344133572675799
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4241d10af8d5571ebe980a1e68a6bd9217062cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (913 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2008-paris-conference-org.grazian-archive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2008-paris-conference.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2009-q-conf-kandersteg.grazian-archive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2011-living-archives-conference.grazian-archive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'americashistoryretold.grazian-archive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.2008-paris-conference.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cosmicheretics.grazian-archive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.2008-paris-conference.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcalendars.2008-paris-conference.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcontacts.2008-paris-conference.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'graziana.grazian-archive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.2008-paris-conference.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naxos-home.grazian-archive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.2008-paris-conference.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.2008-paris-conference.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.2008-paris-conference-org.grazian-archive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.2008-paris-conference.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.2009-q-conf-kandersteg.grazian-archive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.2011-living-archives-conference.grazian-archive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.americashistoryretold.grazian-archive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cosmicheretics.grazian-archive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.graziana.grazian-archive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.naxos-home.grazian-archive.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00075003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018e7f3e83fa000004030046304402202590247ae9adf9792ca595bdf5b490ef0959f6ad815183dcb0e2cae1d3d9d00c02206ef449026db21b1118ce0d987efc1391be0b262e07530ac625cc1b4e494b84d200770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018e7f3e841b0000040300483046022100cc8f353338191a9da5521200d517a2fba11d48139cfb24f9318aff3bcdc01f6d022100bc2fe96765131bf0a1b46d3622987f1eadd3af8ef67e925c14f87532b1be1f40
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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