www.sdgalign.sdgalign.com.au

Issued by R3

About this certificate

This digital certificate with serial number 03:b9:b5:51:74:3d:ea:d0:f8:7a:55:7c:d0:eb:37:14:4c:2a was issued on by Let's Encrypt.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.sdgalign.sdgalign.com.au

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b9:b5:51:74:3d:ea:d0:f8:7a:55:7c:d0:eb:37:14:4c:2a
Serial Number (int): 324530108876602070833865619847389356772394
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: a2:de:fd:31:71:f9:95:b3:e6:03:2f:df:5d:52:85:86:a0:14:ad:d2
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 4e:48:37:ac:6b:74:c7:2e:2c:df:8b:b2:7e:43:fc:47:a6:07:36:aa
Fingerprint (sha256): 8f:29:a9:11:77:6b:ca:ed:2c:a7:7c:c1:17:a0:50:88:da:fb:8e:9b:69:78:1a:32:a7:26:ea:ca:8f:d9:14:b0

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.sdgalign.sdgalign.com.au

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.sdgalign.sdgalign.com.au

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.sdgalign.nl
sdgalign.nl
sdgalign.sdgalign.com.au
www.sdgalign.sdgalign.com.au

Other certificates including the domain name sdgalign.com.au

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.sdgalign.sdgalign.com.au in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFB0oF6ilnDPui3QdDzL
1xbD0Jck3yopwfaGwELK1QZi3hAQB91iaqSs/dBqxRpbaFbzL0eqZ7AsJCcr3Wky
fZ3tNguZz9krl0B5XOXmznNplv7mzq9cnAYt0qRMCSGqbugTVrUpS3XnS+Mm+in0
cIQ3pPl/MtvFhlZatl7YBLacl5M5HHqDlp038SHM1o6PggetU4ZL/wOWKAhAzM/D
jNNra6M8GsGaHXXe4QpPJrn+LTkDj7fp/XuLG76JN2CemoDaGxnOlSBddomRxTxD
Yl8hpDyQJ95ZW6xh1qKc2ZilYs00JI1zXsHXFRPMVo7roX8COZexJPrrwgBhrxoO
pwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 324530108876602070833865619847389356772394
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-14 04:43:52 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-13 04:43:51 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.sdgalign.sdgalign.com.au'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24782381894598585922884803727686421040782696549305577967445623644224080135936648367647596862391369227726087781948460067124203691307779883647615646077204207195895253523252374561312409585798536237663731090809029829773548094364689301332910753850225422130772022503496179776978967379891909759017602870952547208305904254520924456242430289651045914496892604602092158396513424891216768299393925537597637367786139167188781498096315371314497518046160419474597715598896663381212296958273060142439388508343363908355583881826218655201882999341185949211997580137043988831357133613329154389842423246091175229373295834069223062769319
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a2defd3171f995b3e6032fdf5d528586a014add2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sdgalign.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sdgalign.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sdgalign.sdgalign.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sdgalign.sdgalign.com.au'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018d067f7410000004030048304602210096be642a431db0aa49888379cc0e272fdc2acad17755e8340618f46eb2fd2652022100a4413dd2cc7d4fca391f43900a24594040d716f3f74ea324ec7e9e6720d8212000760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018d067f74230000040300473045022100a7e13626e3313751202fd506137c1f6942f90131090fb3de3a05336a96d668160220181168b94e270c16deed2c48b8dde172fd506c6d7565dcf3fbea83b034439ccb
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0068b0d8bc56a9a9b9e918043a8dada821bc6377eea7971979541a5bc185b29168809f5a89af218d21ff50a6a206866e44dcb0f220a19bee72f2199adac4cfba72f5fa20e1bc2be9794dbee38f0125a6c637fbc361dc8319321a30d0e6fb5d2eb1dab1007b5ab487dea70d8ee1b77c4566d931a6f4e7927653bd5152f40a9c28e939d5b7e3958cdac5ff88f731b5d31dda5c8896b9595000db017a35a28726664a03a87808ee1d83cf3961897c7859605fc4a1d71e93fedf1e5f712048f1d11c28a63defcbf45376058dc3365f88cb1e3d63a9163a28f9c5dc8d1bf620e01747776719e44db7fc8154dcc0b78248f3269741f2981f6590f9ecac8260b4e1d78a7a