thehomeschoolminute.org

Issued by R3

About this certificate

This digital certificate with serial number 04:9e:dd:03:32:b9:09:9f:17:32:06:40:1d:0e:92:a2:85:c8 was issued on by Let's Encrypt.

With 12 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=thehomeschoolminute.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:9e:dd:03:32:b9:09:9f:17:32:06:40:1d:0e:92:a2:85:c8
Serial Number (int): 402507533693288973767656764121584947594696
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: a1:57:25:5f:0a:19:cc:a4:c0:fd:91:c4:c3:0b:5d:1a:a7:0c:ac:01
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 67:23:f5:71:56:ed:7d:0f:eb:c2:6b:ab:43:dd:4c:7c:bd:ac:02:27
Fingerprint (sha256): 88:48:1c:80:45:af:dc:2c:c5:b0:f4:e4:3f:94:c7:d9:f2:5a:8c:c4:6c:cc:9c:d1:29:99:c8:1f:bb:af:7b:7e

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate thehomeschoolminute.org

12

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for thehomeschoolminute.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

commonwealthinsurancecenter.com
creampiemilf.com
eastmeetswest.info.pressesenegalaise.com
garagearecords.com.adultvaccines.info
matthewcordle.com.goohgle.fr
poisonivyitchcure.com
rubbishmasters.com
storeycounty.com
talentedpeoples.com.besthotelbouldercolorado.com
thehomeschoolminute.org
virusesrevealed.com
weconsignguns.net

Other certificates including the domain name thehomeschoolminute.org

(limited to 100 certificates)
thehomeschoolminute.org
thehomeschoolminute.org
blackstonefellowship.sex.practicaltactical.ca
thehomeschoolminute.org
fmcap.vc
nix.vc
thehomeschoolminute.org
thehomeschoolminute.org
appletonsatellitetv.com.thehomeschoolminute.org
thehomeschoolminute.org
thehomeschoolminute.org

Certificate

The complete raw certificate details for thehomeschoolminute.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwmwCnMNG8J2hKKyyTKwW
HPFCjVB5W+HVheGfdMIxPCQIjiJ70bw/5qAEc0Y6xUZRK3dGafQkk2+rzmUO2IAj
ljCZ2/Lbyy18RmOACYq44DxqDTwoGUsJp02Z9Ohsq61PxIg9xaViA8ttrG7EHt1t
ntj1c6KN6yYjoA+yt00vWgn12JLCGXzDYJz7pO/WzCAi6u5A8H40aNK5eKcWhKxw
b/dNpWZXIB6Nw9LZ2Eb8hlqT6a8nKeLo7iDuShcOTZGobFywh40Sl3HpDH37GBQs
F/M/gaOTAuoWXvgh5P4s5n11qae9p8cAB0eCpEgCR5t0olJBnJBDX+OEZy6ca46D
UQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 402507533693288973767656764121584947594696
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-03 12:41:59 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-02 12:41:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thehomeschoolminute.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24543492980354610759392427813044703767108973046254258289538811362188488600979405175939552322583050167968294822805535718339543224245358440005002637841130167116065917014658300898822387904251091421469053429595767171329857251267922165335021224774714662372995855476544609087594725420123820243925466378437782320846637898454373627635219842828988744642823031270347387648112476731987758483763430155412112164693132788303518347393417874404529193347051620117538967596700137194512639567076393750349057324306868382343415133411335641121365517080901958324320115168580406108559331975107997676396760763454673308591215901118149593826129
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a157255f0a19cca4c0fd91c4c30b5d1aa70cac01
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (342 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commonwealthinsurancecenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'creampiemilf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eastmeetswest.info.pressesenegalaise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garagearecords.com.adultvaccines.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'matthewcordle.com.goohgle.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poisonivyitchcure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rubbishmasters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'storeycounty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'talentedpeoples.com.besthotelbouldercolorado.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thehomeschoolminute.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'virusesrevealed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weconsignguns.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018ccf8f3caa000004030046304402200dffc14285caea2966d23f98e0d77cf766ce53f8aabc30d58ffbd9d48dceb3e6022032da2b8fb5515679160cbd43519c8ff5e97ac8d4d9adebe1c7bc6668447aec7d00750029d03a1bb674aa711cd3035b6557c14f8aa78b4fe8389449eca453f944bd24680000018ccf8f3d450000040300463044022006741571c5008e1805af98a52a2edac5c45c751c42fa1121389382f2d1049cdb022014b823867af624912b6add6ff1c037e6c3678f061d901c4893ff7204313d7702
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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