lifeartfoundation.org
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:20:99:96:bd:c5:7a:64:6c:e4:ce:66:f1:54:80:32:1f:c4 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=lifeartfoundation.org
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:20:99:96:bd:c5:7a:64:6c:e4:ce:66:f1:54:80:32:1f:c4Serial Number (int): 272430048113655884806890508832239518883780
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 7f:4e:81:93:a4:e1:34:56:3c:cd:48:c8:d1:16:5d:93:65:13:b4:96
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 25:fe:3a:c9:68:f7:d0:16:34:12:d0:03:cb:27:f8:a0:66:be:4b:8e
Fingerprint (sha256): 85:37:4b:f3:1d:5c:23:ad:b2:8b:ec:da:1d:29:fc:b2:05:6e:db:a8:28:de:ad:fa:66:16:39:1d:3a:22:fe:b5
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate lifeartfoundation.org
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for lifeartfoundation.org
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
lifeartfoundation.org
www.lifeartfoundation.org
www.lifeartfoundation.org
Other certificates including the domain name lifeartfoundation.org
(limited to 100 certificates)
www.lifeartfoundation.org
lifeartfoundation.org
lifeartfoundation.org
lifeartfoundation.org
www.lifeartfoundation.org
lifeartfoundation.org
www.lifeartfoundation.org
lifeartfoundation.org
www.lifeartfoundation.org
www.lifeartfoundation.org
lifeartfoundation.org
lifeartfoundation.org
lifeartfoundation.org
lifeartfoundation.org
lifeartfoundation.org
lifeartfoundation.org
lifeartfoundation.org
lifeartfoundation.org
www.lifeartfoundation.org
lifeartfoundation.org
www.lifeartfoundation.org
lifeartfoundation.org
www.lifeartfoundation.org
www.lifeartfoundation.org
lifeartfoundation.org
lifeartfoundation.org
lifeartfoundation.org
lifeartfoundation.org
lifeartfoundation.org
Certificate
The complete raw certificate details for lifeartfoundation.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgISAyCZlr3FemRs5M5m8VSAMh/EMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA3MzAwMDE3NDRaFw0x OTEwMjgwMDE3NDRaMCAxHjAcBgNVBAMTFWxpZmVhcnRmb3VuZGF0aW9uLm9yZzCC ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALOiCw3yxgNil7VFRA7K3udk HTnRUY//RtHV3vQIRASsTuq1oYKhqaFzXfo5jHS4/vmfA071Dr9seo761RKs6TE4 TcRKVpn6jlHaugDVnxGcGS6MInb7VsbgiPTWQtnyGBQr5RNsc3Z5vRPFsUvs18PU XCbPtanKrV3DmQmYFwAsIpnN8rD4sDHkbGG2yAeSOfEahko0doANYtk8UtCVsgkf KkJ1Oa9nY4fUH60u8T5CkFjvH6AMlQNa/L86+NvWtMuZCntr/AKismADx5Efj0p7 ezcSZseOEzd3JIF3oRJy/1hmHctL7hsiHYsxN4230QKT5SbJAf5IWyuwjqr2pi0C AwEAAaOCAoYwggKCMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcD AQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUf06Bk6ThNFY8zUjI 0RZdk2UTtJYwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYB BQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2Vu Y3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2Vu Y3J5cHQub3JnLzA7BgNVHREENDAyghVsaWZlYXJ0Zm91bmRhdGlvbi5vcmeCGXd3 dy5saWZlYXJ0Zm91bmRhdGlvbi5vcmcwTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYL KwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlw dC5vcmcwggEFBgorBgEEAdZ5AgQCBIH2BIHzAPEAdgBvU3asMfAxGdiZAKRRFf93 FRwR2QLBACkGjbIImjfZEwAAAWxAdGGXAAAEAwBHMEUCIQDu6QePHfMwm2oOPYcF uJl7HxbcWHU5MoFKoRgcjyHgbQIgaXR1hCyilF1uEw9ECns+8w+CtqaD/yPa2m1A WD85BBAAdwBj8tvN6DvMLM8LcoQnV2szpI1hd4+9daY4scdoVEvYjQAAAWxAdGNW AAAEAwBIMEYCIQCe1UzVTARA545A2HnPSjkAurP/I+Z+CxBF2TN8pytogQIhANEN fA3MYqRTozxbewpgHosi/sjsGs4ZIVlRAvpSCB8LMA0GCSqGSIb3DQEBCwUAA4IB AQB2xoZuADQOACZLT7l2hjnDchTbnA+F0j0m8p3dliXOu1cC8kpcTYx43zXRkUsY S/azX0k00f9QbdWUFTKUX9KkeMO3j3PR7SvODdnDdxfMwwg3dji1BYiUFQsYhggV cEnOkkkZ6MeWK1cZM+tyzOCuWXt7nj8C1ns61PEkKHH5baN/rdbOGAdUN5x4zoIp 8+p8SOJ1tYMcN9Sa9AVXwh/F9g9UCt1NDe/dUC7r0WgWXX7KCGTzpDk4NI7Ivf3R rHEWBw6SBdn+QEw/EFFFZWWzpYxBFC8lZXs4od7koorpo9j2oSWuxTNloYOJslfA bu66xuGL+Gw2jpKtYkMXkuCu -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6ILDfLGA2KXtUVEDsre 52QdOdFRj/9G0dXe9AhEBKxO6rWhgqGpoXNd+jmMdLj++Z8DTvUOv2x6jvrVEqzp MThNxEpWmfqOUdq6ANWfEZwZLowidvtWxuCI9NZC2fIYFCvlE2xzdnm9E8WxS+zX w9RcJs+1qcqtXcOZCZgXACwimc3ysPiwMeRsYbbIB5I58RqGSjR2gA1i2TxS0JWy CR8qQnU5r2djh9QfrS7xPkKQWO8foAyVA1r8vzr429a0y5kKe2v8AqKyYAPHkR+P Snt7NxJmx44TN3ckgXehEnL/WGYdy0vuGyIdizE3jbfRApPlJskB/khbK7COqvam LQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 272430048113655884806890508832239518883780 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-30 00:17:44 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-28 00:17:44 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lifeartfoundation.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22676563059918860297395074688703818032298652223433247071615634743356438913884267622753211418152657937326254903188935346849854228106278005777562469798735322215162860993776139759352094705993118775028081234409293170260293422869597283345761620257033352567595592453600032129851023145170432680176252564477764753916785776253835575484374629830434520175171726524195709163870188252384978596513666836593009114852325769381031547428686577608853888462391379104208254767428128393596868973866935402386500138126867903873453728158017303949870929778819386302668707382270917323074569498427441426865485762908094884431339232770090761365037 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 7f4e8193a4e134563ccd48c8d1165d936513b496 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lifeartfoundation.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lifeartfoundation.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f10076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016c407461970000040300473045022100eee9078f1df3309b6a0e3d8705b8997b1f16dc58753932814aa1181c8f21e06d0220697475842ca2945d6e130f440a7b3ef30f82b6a683ff23dada6d40583f39041000770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016c4074635600000403004830460221009ed54cd54c0440e78e40d879cf4a3900bab3ff23e67e0b1045d9337ca72b6881022100d10d7c0dcc62a453a33c5b7b0a601e8b22fec8ec1ace1921595102fa52081f0b . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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