profound-strategies.org

Issued by R3

About this certificate

This digital certificate with serial number 03:00:5d:e4:df:ef:d1:e8:02:6a:91:b5:34:43:e3:ed:2c:61 was issued on by Let's Encrypt.

With 16 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=profound-strategies.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:00:5d:e4:df:ef:d1:e8:02:6a:91:b5:34:43:e3:ed:2c:61
Serial Number (int): 261461664384550318361236137648918151113825
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 8b:07:79:e9:f9:a0:1a:01:4f:84:fd:2d:73:ea:7e:89:78:ed:de:d5
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 11:9f:6a:1f:ad:91:d9:53:cd:1c:e6:09:87:90:9f:ef:1a:7f:1e:14
Fingerprint (sha256): 86:04:ab:80:82:79:5f:0b:b8:6e:49:70:5a:ba:57:09:de:86:71:3c:9f:98:72:0c:9e:2d:98:73:84:db:28:ce

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate profound-strategies.org

16

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for profound-strategies.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

252q.com
9ch.us
arbitrageplays.com
ashaadi.com
baylorcounty.com
churchrock.com
defundthemarxists.org
iowalakes.com
menupromotion.com
profound-strategies.org
sahomemagazine.com
showcatalog.com
thetexaswoman.com
wishest.shop
wv.cosfacts.org
www.boothlaw.org

Other certificates including the domain name profound-strategies.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for profound-strategies.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3HyjylXgDdvL/vQcFUUj
OS8CiaDX7hdaTpTEG+op+oCLZCxF6jAKA5eG1blSw6zT5TD/ozQK553neZ8djHTZ
0CqzoAPLrXjLBnxZl+1aYWNqyHnt2snzjYU8jgAcOiIMy7aDPooxMw2MDffvxUO2
rPSRXDYIpYpQHsjDejrzncYR2cYhjz3o45yljhP0y5GjFDPPK44Vc09LV0XQje0b
wbjJVbDgqTIN5AF5wlAKkqbefUZVKGgixVDix4PiEwEqUrrB+xEouPYgY1y/pGo0
N1Qs0lYANtznzkZYhoI2/xxTG6H7607xowlyESpOTH8jKPZaCzdHxtaEIR2FIKOO
qwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 261461664384550318361236137648918151113825
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-15 22:59:44 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-14 22:59:43 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'profound-strategies.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27833889271669266634551274704700772575486062423396786656431344141973611208616428681471329854854691794949025641674666199570730700707473107318941510287366431889751817426660652417424483305522759218435760283120279861808216630543638439187859984315824551886881919520166666515938103356289181859400047076020620803866101441913687557289134289625215194800190469976825085323707717893084623278454291791174024082968928153152871623632493355320291774411167787326840337917279027789014671317875079537791530929374120890538082891053643153588254220155371777567266938797296459308186019353507056947244258088731410548425300088281787562954411
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8b0779e9f9a01a014f84fd2d73ea7e8978edded5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (276 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '252q.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '9ch.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arbitrageplays.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ashaadi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baylorcounty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'churchrock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'defundthemarxists.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iowalakes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'menupromotion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'profound-strategies.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sahomemagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'showcatalog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thetexaswoman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wishest.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wv.cosfacts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.boothlaw.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018ee433cf0a0000040300483046022100bdc54fc1f06109b4cf7b0d064d50bd48fdb94d09ac00c3b0d7b590eae670992d022100b0a6ae6d4c82b7586e2fc6f523b40338cba0823fb6413b2b0b7a64e47dfc6628007700dfe156ebaa05afb59c0f86718da8c0324eae56d96ea7f5a56a01d1c13bbe525c0000018ee433cfd00000040300483046022100a96eea503e2cacb0ab2165dfe65c519b35ecb6f1137f68d7b8c170c61b04cab80221009aabf5d9d7b629ac1185c06285b6aa235dfe9d67a84b1f05fe94e89732b1374a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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