thehomeschoolminute.org

Issued by R3

About this certificate

This digital certificate with serial number 03:f3:3a:af:05:4f:2b:ea:68:d3:3c:c2:05:86:6a:9d:f1:5f was issued on by Let's Encrypt.

With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=thehomeschoolminute.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f3:3a:af:05:4f:2b:ea:68:d3:3c:c2:05:86:6a:9d:f1:5f
Serial Number (int): 344103476940459219372907239496538258272607
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ba:a0:61:14:6d:89:15:cb:26:d3:2c:c2:d8:37:7e:64:66:da:51:04
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 51:4c:7b:2b:38:96:3f:54:14:73:42:a4:dd:1b:44:f0:84:80:33:6e
Fingerprint (sha256): 91:c3:0f:67:e3:38:91:a3:a6:d8:dd:ab:55:b6:eb:25:d9:26:11:c6:28:4c:de:91:7a:e3:a3:1d:22:3f:7a:6e

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate thehomeschoolminute.org

10

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for thehomeschoolminute.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

2amigos4one.com
ameriqueforvip.com
bienesyraices.com
edmalbums.com
franksocial.org
gogreenhomela.com
ipayex.com
lgbtboutique.com
phoenixrealestatesource.com
thehomeschoolminute.org

Other certificates including the domain name thehomeschoolminute.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for thehomeschoolminute.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyEH3cghBZooRKQkLVmdJ
xTHlUWoj6lZ6zEL4BovDMqmWh4XGz3//ksqs/8Cz6zCbqG5eagFB2VHkWEntD9wf
nSTnavSOrd3Gg8qwIWvE0bg3+u71cJqZyMQ0cSZ1p8f6O+TnnZbx9a4g16oQSCyL
kj4ay5qlXDozDcQhr2grNkNvoxMUE2MHZuJFa9DW7F38UM3O9zvtyS4fPPzmO5/h
z7TP4TyHz9/LKhZNSY2CrJs+YugSebC5oM/HdX/49IQ08OI2r9yzbjWzbYc59WaN
LZWoRWflCtv48fo5xkJ7u2l+EHPJejz5eTq8IRMx//nhxpAHqCWclVKf6vVm7YUv
NwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 344103476940459219372907239496538258272607
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-26 14:14:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-25 14:14:53 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thehomeschoolminute.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25280190328040811682775463224431389398732933351785638866966596631594833986857770358561546603650719712501353474916364193971203821216912175698363309598863713232925446654449201081170692823872843923600718992795774562239285988373623578825469993326949744088100292066877405096631403063943276089681574533714761752749075770399264493830592429984787549986401337243742088952646082586503563683610696025628847853858619644541502728784924416421259567037800450325892504875954817659958291062939285818367548395816074599511017967490796388885576248827353148738148666127581241205609496347035684284006462454370616132157352833756117416095543
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							baa061146d8915cb26d32cc2d8377e6466da5104
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (194 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2amigos4one.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ameriqueforvip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bienesyraices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edmalbums.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'franksocial.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gogreenhomela.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipayex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lgbtboutique.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phoenixrealestatesource.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thehomeschoolminute.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018d46568f550000040300473045022100b511df8e421b12fb61c5cacc27c0f367ac1b497fcc7d85bcb73788fd7d235b03022038fc19a0d385d662d7d21428625e119a8115b1756dd0e0c0b1b1fd74fc8ccefa007700a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018d46568f5d0000040300483046022100e9ed13783da8bc3ea928d67d23f598a8abf7dd3a9932dd7e54b4397975d0e740022100b03d67d13d4317b61c8c8e9e067f475c0ac33fa92e7b36f8a241b239c4cf72f3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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