profound-strategies.org.arbitrageinvestment.org

Issued by R3

About this certificate

This digital certificate with serial number 04:e0:87:a5:56:22:f6:97:9c:7d:6d:8b:a4:b5:11:ce:fb:ea was issued on by Let's Encrypt.

With 11 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=profound-strategies.org.arbitrageinvestment.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:e0:87:a5:56:22:f6:97:9c:7d:6d:8b:a4:b5:11:ce:fb:ea
Serial Number (int): 424852698172801124330438596114182516440042
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 56:df:ff:00:33:04:ac:e7:b0:f2:6a:64:df:ba:fa:cc:bd:30:13:03
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 82:b0:0a:4d:bd:63:a6:2d:cc:1d:26:69:ea:90:41:d1:ba:d2:8a:7f
Fingerprint (sha256): 7f:e8:09:e8:ca:40:58:08:a6:d2:1d:57:9c:37:da:1b:6a:36:87:02:4d:97:40:0d:7d:da:07:75:a3:c8:ce:61

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate profound-strategies.org.arbitrageinvestment.org

11

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for profound-strategies.org.arbitrageinvestment.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bridgetteellwood.com
charltoncounty.com
d-psicose.com
fortworthnewhomesguide.com.bullioncoinprices.com
jobs.cretefire.com
madeswealthybyrxsugarcertifiedallulose.com
orbain.com
profound-strategies.org.arbitrageinvestment.org
rvjoblistings.com
shopletsgobuffalo.com
sma.video.estates.cool

Other certificates including the domain name arbitrageinvestment.org

(limited to 100 certificates)
enerpactoolsgroup.asia
suricate.ca
catholicyouth.bible
ksn.me
nice4vip.com.olio.gold
shipwrecks.site
profound-strategies.org.arbitrageinvestment.org
fresnopflag.org
arbitrageinvestment.org
skate.vc
arbitrageinvestment.org
34725625397.ca.arbitrageinvestment.org
p-c.co.za
strandhotel.co.za

Certificate

The complete raw certificate details for profound-strategies.org.arbitrageinvestment.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyxIjC73hv6chZVNjZClb
EkbwuOEwYCTkdiOYa6QsoRvMNvYSzn+KTwYZXhdLdcUYizecHS2VbmFd0MTQfMm6
DyU2evvtwRtLl8vzNm35WrtASPhXGy/MstClun5ddRUcxk5Sb1STj2xIXI2sRijg
BvhNCOHpi7xS/25yurKNt1Y/m/CJz3w9bR5dwG/rFgkCKqsqRbcrEe85Jbeptbhu
eEaoswouQcjjjpjRAsM8oWZbpDgV4wyXtA76wIsZD21GHfBxfWY03d8DuB7uCOTo
CdFK2ZnlKY4IjyCwR19udOK3UFcclAKqlFmM0tMKXRpCaeaO/xP00DO+k/IVcMhc
AQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 424852698172801124330438596114182516440042
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-29 06:55:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-28 06:55:54 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'profound-strategies.org.arbitrageinvestment.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25635319545805491300395230559273406349054885167523032752065382559277273574329682285485607232599867849286784406216135100179619892894486106869292929618497058076980503219651838735294943009629770343013728855728346869895749988056141526349077001001742857165764324134578081246651944332061548345315726091235650783330237627882354808862544619441900464085756717164267296869100679073459728573752088801115908888755121595117482640008418763550464547259172224843962135987395741750962699234001209943025906252094597894198957582446329084451328553693982152753493715536993620916815282245264616733961092401538990228280360110681949200735233
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							56dfff003304ace7b0f26a64dfbafaccbd301303
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (302 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bridgetteellwood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'charltoncounty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'd-psicose.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fortworthnewhomesguide.com.bullioncoinprices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.cretefire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'madeswealthybyrxsugarcertifiedallulose.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orbain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'profound-strategies.org.arbitrageinvestment.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rvjoblistings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopletsgobuffalo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sma.video.estates.cool'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018cb4929a130000040300473045022012c754583664635345e9b6dc03a2b47ceaf0b1fccbaeb14708c0bdc1c7be7962022100c702079ad6ead30de682590b2732ffc0595cc81118c69ad74946ce4199953f940076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018cb4929c010000040300473045022100ffdaf91139b39193bc4b901a4a9b62ff78f58679dd9ad2de150ecd58f18614c1022063abfba9e84c06b658f56b159412d168eadcce84136a06170e6654cbc3869b8d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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