chalkdoc.com
Issued by R3
About this certificate
This digital certificate with serial number 04:bf:14:29:83:64:1c:1e:5b:a9:41:2e:50:af:73:8e:e1:e0 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=chalkdoc.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 04:bf:14:29:83:64:1c:1e:5b:a9:41:2e:50:af:73:8e:e1:e0Serial Number (int): 413469875917954307964093385788167841309152
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: de:e4:9b:4c:6c:7a:ac:06:21:76:f5:6c:14:31:80:af:1f:28:f9:0c
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 5a:ab:52:a7:67:d7:16:d6:46:d8:3e:85:85:60:da:9b:ec:00:10:e5
Fingerprint (sha256): 8d:0b:eb:13:94:89:f2:eb:46:98:df:f3:59:f5:b9:9d:69:2c:3c:89:a6:20:c4:33:71:8a:73:f6:4b:1b:70:bb
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate chalkdoc.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for chalkdoc.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.chalkdoc.com
chalkdoc.com
chalkdoc.com
Other certificates including the domain name chalkdoc.com
(limited to 100 certificates)
chalkdoc.com
chalkdoc.com
www.flat-ah.eu
wa-bloc.chalkdoc.com
wiserweb.com.br
page.cards
chalkdoc.com
www.loveoma.co
chalkdoc.com
www.tudonolugarbh.com.br
chalkdoc.com
gideonlabs.com
app.chalkdoc.com
secure.itc3.app
boardgames.richardbell.me.uk
habitboxplan.me
www.analizadorcfdis.app
ogh.am
chalkdoc.com
app.chalkdoc.com
chalkdoc.com
chalkdoc.com
app.chalkdoc.com
nastasteg.church
app.chalkdoc.com
*.chalkdoc.com
app.chalkdoc.com
app.chalkdoc.com
raviolstation.com
app.chalkdoc.com
chalkdoc.com
app.chalkdoc.com
chalkdoc.com
amitakumar.com
keok.tk
app.chalkdoc.com
app.chalkdoc.com
*.chalkdoc.com
demo-app.andaman7.com
chalkdoc.com
chalkdoc.com
chalkdoc.com
www.airesdigital.com.br
app.chalkdoc.com
daisymaebbq.com
chalkdoc.com
app.chalkdoc.com
app.chalkdoc.com
new-tourism.com
app.chalkdoc.com
generator.chalkdoc.com
hortocorporativo.com
*.chalkdoc.com
vrterytrceads.tk
www.thelcnfirm.com
app.chalkdoc.com
heyloo101.chalkdoc.com
app.chalkdoc.com
chalkdoc.com
soupmania.lu
chalkdoc.com
www.blast-engine.io
app.chalkdoc.com
app.chalkdoc.com
generator.chalkdoc.com
stationdesigner.app
www.jobwebway.com
nordiccoastalcleanup.com
pro.sprel.app
app.chalkdoc.com
app.ujama.co
app.chalkdoc.com
chalkdoc.com
www.flat-ah.eu
wa-bloc.chalkdoc.com
wiserweb.com.br
page.cards
chalkdoc.com
www.loveoma.co
chalkdoc.com
www.tudonolugarbh.com.br
chalkdoc.com
gideonlabs.com
app.chalkdoc.com
secure.itc3.app
boardgames.richardbell.me.uk
habitboxplan.me
www.analizadorcfdis.app
ogh.am
chalkdoc.com
app.chalkdoc.com
chalkdoc.com
chalkdoc.com
app.chalkdoc.com
nastasteg.church
app.chalkdoc.com
*.chalkdoc.com
app.chalkdoc.com
app.chalkdoc.com
raviolstation.com
app.chalkdoc.com
chalkdoc.com
app.chalkdoc.com
chalkdoc.com
amitakumar.com
keok.tk
app.chalkdoc.com
app.chalkdoc.com
*.chalkdoc.com
demo-app.andaman7.com
chalkdoc.com
chalkdoc.com
chalkdoc.com
www.airesdigital.com.br
app.chalkdoc.com
daisymaebbq.com
chalkdoc.com
app.chalkdoc.com
app.chalkdoc.com
new-tourism.com
app.chalkdoc.com
generator.chalkdoc.com
hortocorporativo.com
*.chalkdoc.com
vrterytrceads.tk
www.thelcnfirm.com
app.chalkdoc.com
heyloo101.chalkdoc.com
app.chalkdoc.com
chalkdoc.com
soupmania.lu
chalkdoc.com
www.blast-engine.io
app.chalkdoc.com
app.chalkdoc.com
generator.chalkdoc.com
stationdesigner.app
www.jobwebway.com
nordiccoastalcleanup.com
pro.sprel.app
app.chalkdoc.com
app.ujama.co
app.chalkdoc.com
Certificate
The complete raw certificate details for chalkdoc.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIE9DCCA9ygAwIBAgISBL8UKYNkHB5bqUEuUK9zjuHgMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDA1MTQwNjEwNDBaFw0yNDA4MTIwNjEwMzlaMBcxFTATBgNVBAMT DGNoYWxrZG9jLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMvO gmcdrAHUK67VBkaEWY1IG3TDgN1MS3jpDmpWjiwkZ3F0yKch21UxCftnDccQSape poI5RjjjWuacbOYgz5sSkcTNXbOTV30FaXd806z3YZYszu7fte/hnDx5DHPaluEd QgX+FV5BP4djY5Yoh1VW7gVym+wx4oNDtcx8+XoljLDYIBJaqiv/kFur7LwEtTtH nfurEdSwosalRKw5tC/uIdJqrxQsegD42BrCvFNLf/5ze+kgXKyHh2K+OdOGLFR+ 2jxdrEt7IP0m1055HdRHXEmS2lMcCtrHW4HrYCgJh1HUJOpDejSO1TtRqfbcMd21 WbHobzQ3UUkFRsM23wMCAwEAAaOCAh0wggIZMA4GA1UdDwEB/wQEAwIFoDAdBgNV HSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4E FgQU3uSbTGx6rAYhdvVsFDGArx8o+QwwHwYDVR0jBBgwFoAUFC6zF7dYVsuuUAlA 5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRwOi8vcjMu by5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNyLm9yZy8w JwYDVR0RBCAwHoIOKi5jaGFsa2RvYy5jb22CDGNoYWxrZG9jLmNvbTATBgNVHSAE DDAKMAgGBmeBDAECATCCAQMGCisGAQQB1nkCBAIEgfQEgfEA7wB2AHb/iD8KtvuV UcJhzPWHujS0pM27KdxoQgqf5mdMWjp0AAABj3XwZusAAAQDAEcwRQIhAJSMSbiP KFdwHRBDa4BF1Vu9fqphy9SDI7y5oIkutaTjAiAw+GPiqYxpPSYooQ5cAyto0CBE jOD3RfxlcmVLnC58+gB1AEiw42vapkc0D+VqAvqdMOscUgHLVt0sgdm7v6s52IRz AAABj3XwZrsAAAQDAEYwRAIgQ9LOrve4hcTFu1o5xLuEy4y22WI2tkvJp+HHQRwx GeICIBVOSPHUkAkWhxEYbaka0wSZlpKFK3WvitJpbZifEs9IMA0GCSqGSIb3DQEB CwUAA4IBAQCmO4RbEjDtJZ01WSO2pt1zPn3mqSyR6F/Njm1rBGeur/nN8qNMwU9X BxTuzcXoEpMLx4dDCC/Jqsppw5cI8LoGIwguqz1sdhiPFnY5g6fZiRTpjNFzfdjg C+u76rHKuiLSBbapI9PZAEOixmuGwtKDzDmWAJ6XjhtmD8vdwkfdzOARfxwUA02e sLgJVBmUVVuJpiefs8FE8OQAMuC5AtVomY5EestFLScyZieW8J22V63Fw4Ssfihp WpPHEqzQj8fF66SbyPtqmI4kj36yKC0thMVgNvCP8dG/fp9o95WxxboBIFhyvbVF Nwx7qawZXtK8S7HstSYDadj8rH9pxtA4 -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy86CZx2sAdQrrtUGRoRZ jUgbdMOA3UxLeOkOalaOLCRncXTIpyHbVTEJ+2cNxxBJql6mgjlGOONa5pxs5iDP mxKRxM1ds5NXfQVpd3zTrPdhlizO7t+17+GcPHkMc9qW4R1CBf4VXkE/h2NjliiH VVbuBXKb7DHig0O1zHz5eiWMsNggElqqK/+QW6vsvAS1O0ed+6sR1LCixqVErDm0 L+4h0mqvFCx6APjYGsK8U0t//nN76SBcrIeHYr4504YsVH7aPF2sS3sg/SbXTnkd 1EdcSZLaUxwK2sdbgetgKAmHUdQk6kN6NI7VO1Gp9twx3bVZsehvNDdRSQVGwzbf AwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 413469875917954307964093385788167841309152 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-14 06:10:40 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-12 06:10:39 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'chalkdoc.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25728209481698217945517370709529595667295751948696846432723183600856414898887800808915369147440394503331567073873882184121549393040659587169155154264498463222796093848867404371754256088279145047258125439226525431530521412133950800510879080221933071377971803408819234838951395427258634617075423641107821936511267017421822360699847867624577692051976655799367877890618042093170322999484282654238740291545458475484321231738485151924562304229930085638529984791524838887021006220358248034228070935253086871828970895021721492896258708108991501808983036010535150729306065468276681008795403463054746685124461253382897566932739 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) dee49b4c6c7aac062176f56c143180af1f28f90c . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chalkdoc.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chalkdoc.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef00760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018f75f066eb0000040300473045022100948c49b88f2857701d10436b8045d55bbd7eaa61cbd48323bcb9a0892eb5a4e3022030f863e2a98c693d2628a10e5c032b68d020448ce0f745fc6572654b9c2e7cfa00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018f75f066bb0000040300463044022043d2ceaef7b885c4c5bb5a39c4bb84cb8cb6d96236b64bc9a7e1c7411c3119e20220154e48f1d49009168711186da91ad304999692852b75af8ad2696d989f12cf48 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00a63b845b1230ed259d355923b6a6dd733e7de6a92c91e85fcd8e6d6b0467aeaff9cdf2a34cc14f570714eecdc5e812930bc78743082fc9aaca69c39708f0ba0623082eab3d6c76188f16763983a7d98914e98cd1737dd8e00bebbbeab1caba22d205b6a923d3d90043a2c66b86c2d283cc3996009e978e1b660fcbddc247ddcce0117f1c14034d9eb0b809541994555b89a6279fb3c144f0e40032e0b902d568998e447acb452d2732662796f09db657adc5c384ac7e28695a93c712acd08fc7c5eba49bc8fb6a988e248f7eb2282d2d84c56036f08ff1d1bf7e9f68f795b1c5ba01205872bdb545370c7ba9ac195ed2bc4bb1ecb5260369d8fcac7f69c6d038