letfreedombloom.org

Issued by GTS CA 1P5

About this certificate

This digital certificate with serial number 8a:44:af:e1:93:b6:3a:10:0e:f9:bd:a2:78:b4:0f:ca was issued on by Google Trust Services LLC.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=letfreedombloom.org

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 8a:44:af:e1:93:b6:3a:10:0e:f9:bd:a2:78:b4:0f:ca
Serial Number (int): 183790106898430558627656198707792318410
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 92:10:f2:86:93:13:28:ef:d6:63:9a:5b:f0:6e:4c:9f:a9:bf:98:68
AuthorityKeyId: d5:fc:9e:0d:df:1e:ca:dd:08:97:97:6e:2b:c5:5f:c5:2b:f5:ec:b8

Fingerprint (sha1): a5:9c:0e:27:39:82:49:03:6b:39:04:ed:e3:5b:b6:0c:b0:be:3b:b6
Fingerprint (sha256): 91:23:32:2c:5c:3a:49:d1:a2:14:2d:82:73:4d:ab:f6:99:dd:1e:c9:29:08:36:8c:7b:d3:47:19:4d:6b:c8:c3

Issuing Certificate URL: http://pki.goog/repo/certs/gts1p5.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1p5/3SOsFVfUNcM
CRL Distribution Point: http://crls.pki.goog/gts1p5/rHbLz6Z-cUE.crl

Check the revocation status for certificate letfreedombloom.org

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for letfreedombloom.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

letfreedombloom.org
*.letfreedombloom.org

Other certificates including the domain name letfreedombloom.org

(limited to 100 certificates)
delivery4vip.com.letfreedombloom.org
institutioncrowdfund.org.letfreedombloom.org
letfreedombloom.org
rplayer.co.za
ialaska.com.ussf.co.za
letfreedombloom.org

Certificate

The complete raw certificate details for letfreedombloom.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVWyZ7R6nPiu9O8CMgBg
J+2ynsmChoFeCXwwFNJmN/0r1Slt4RYq+KRMqi8yBgFlK7ly3NQBDfAs84bdcR8r
reRnk6eRIj3moKXYXeWRaZjK8T+ex/mbPn49icjKRjRpNh+KleeX87pOTQqskWd9
KMFeBobEQZgTXNDBfo6zSNT3yrH6NZW5odo1euBTNyC3Q4PKNCOhiQYRY9LxVOmD
DrCwbMxYXpNkN2jw2xYsAgT8vDZSU5tOFJVCdn9QHfYfGxdPiO9IchnLax6qUn2X
+mgkES2Eu6IqeBRtZzkd5KEyjHw2TGrCciYMzHMpzEezKabcuC3dfyTsyF906g2Y
0wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 183790106898430558627656198707792318410
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1P5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-22 22:45:59 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-21 22:45:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'letfreedombloom.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23901298352470346592413989466614747281953769968051352693827996305951676071813097339488129532754126012148050706809199873286347848844501493624075109419121519237279973918077723415958470006401010739290049111606802002764222696079429832250475129056181456653779903749723816376684505358519226138842180855702878791813690062916042671973978058088116040291427969896165200723583505925264140534377807597851726300147526908408048159998797640333465776642180810330867738321703007132724107419695886725933642543977843374718271394951111216472684674061864089676039347020956782652016741052234547980714587012751186672819695371670463789766867
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9210f286931328efd6639a5bf06e4c9fa9bf9868
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d5fc9e0ddf1ecadd0897976e2bc55fc52bf5ecb8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1p5/3SOsFVfUNcM'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1p5.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (46 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'letfreedombloom.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.letfreedombloom.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1p5/rHbLz6Z-cUE.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018f0833bfc50000040300483046022100b1ca30f0d9d4b355a3b24b49e7484685ccb0e4d2866b09334cbdec79dc2081f4022100f170fd06dcc212e651caa4e26d6b9fa083fbfab401c2dd0cff8fdf32fe4186f800750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018f0833bfc8000004030046304402203993076a2e2f260b5b4b4f43158f30da06e4f7ef24be4ca107d355e063a1bf72022004b7c875d70de2b3aa1cb3312c73bdb9d323f612c0fda68114e3ee7b8c2b7052
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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