turntableneedles.org

Issued by R3

About this certificate

This digital certificate with serial number 03:81:7d:50:17:20:4f:fa:64:eb:aa:97:38:47:1a:aa:8e:0e was issued on by Let's Encrypt.

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=turntableneedles.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:81:7d:50:17:20:4f:fa:64:eb:aa:97:38:47:1a:aa:8e:0e
Serial Number (int): 305399852480359073105229875159912824868366
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 1a:0e:31:ac:7a:c5:0f:10:b9:ab:84:53:dd:5b:14:eb:39:38:81:e8
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): c1:08:90:03:2f:75:28:59:0d:e2:4e:0a:88:c3:0e:49:0a:da:71:4b
Fingerprint (sha256): 8e:aa:fd:15:81:c0:71:52:1f:60:87:95:f7:20:70:52:50:49:f7:b7:a2:8b:ea:9e:1d:3e:39:7b:91:ff:1a:38

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate turntableneedles.org

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for turntableneedles.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

hireblack.io
jeanliedloff.com
lpj.co.in
profoundstrategies.co
realtorbob.us.hvaclakenona.com
rvjoblistings.com.bmu.co.in
sangabrieldentist.com.quantumgpt.org
turntableneedles.org

Other certificates including the domain name turntableneedles.org

(limited to 100 certificates)
tribeclubs.com.turntableneedles.org
turntableneedles.org
getabetterjob.ca
turntableneedles.org
turntableneedles.org
netpositivewater.com.turntableneedles.org
turntableneedles.org
modaltownhome.ca
ukr.bible
turntableneedles.org
bideven.com.gameinn.org
turntableneedles.org
natecain.org
lia.ng
turntableneedles.org
bhagawadgita.org
arbitragee.com.mushroomclothing.org

Certificate

The complete raw certificate details for turntableneedles.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkVpb81TMlbm1LyOwpBI
DzPwbUTL/EXGcPygBAVl4FAh9tFH5XOsp9tGgmaRw/NKjeMGG3V5x69wrkSjnlET
WkSFriM1pMTuGCLPjgIuD7f9NK/aZs81aMK3nj9I33BGxKvfFKW8F8+zMvnb0/x2
kyFWsPyVk1kXmiY3QxLMpbgyXnnPv3YQczuhGoS+btVYmfKHJXKYfB4LIRAFwsh1
Q583JoMsP2bt6hHTwPVxXyUhhc/C3l7hzND/AcnacXsd5bF41EvBeX2J5UWcdQi1
rERM7au0ifZY7hzfXuRplQPZYxXB1fYxoWlUhf2r9LzgkJ3B/ZGDYFXSbyyZ4rTD
zQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 305399852480359073105229875159912824868366
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-28 07:55:43 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-27 07:55:42 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'turntableneedles.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21494740109192549635531713920379098981475651043286450368452442785980071756377206895755239766580390893924302581072825645998185697172087838819497232469317183558741773275475043557238942733229092327206143376896659586055471260871796296825953745514504822263804038331326260066244032469913279926096709816858905945288149051306570681465477088009653643694728536537983475096618778878933216684617033578872586192379695156952279166071864470475152954780659913560678347605209351434398872901046249852145064442310342374150586104159150600062038238782721083329025578820872296898529460089558536440783650872202787508584829010719833618432973
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1a0e31ac7ac50f10b9ab8453dd5b14eb393881e8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (190 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hireblack.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jeanliedloff.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lpj.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'profoundstrategies.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'realtorbob.us.hvaclakenona.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rvjoblistings.com.bmu.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sangabrieldentist.com.quantumgpt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'turntableneedles.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018cafa2fe180000040300473045022100f3e605908cc3835f66bc5b8fd0c021edb2a4f8fde53f86db257285f681f6391c02205caedd20e7877135fec01e3a15ed3097e508234d72683345f6cbe2759b9a5a5800760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018cafa2fefa000004030047304502202080526657ece8d4152f699f541b6b758fbea8ac1d9c50345fbc4a862a57c1190221009ef4c8a43f32c086ea40cfbcb3ec2d58df6a179bd0b4841bdd2de1488cb7a5c5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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