*.freedombunker.com
Issued by R3
About this certificate
This digital certificate with serial number 04:62:fa:9d:5d:80:b8:3e:f1:3b:13:2c:99:e1:33:2d:e5:dc was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=*.freedombunker.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:62:fa:9d:5d:80:b8:3e:f1:3b:13:2c:99:e1:33:2d:e5:dcSerial Number (int): 382129939771308294217889130750471454975452
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 2a:77:b4:5f:0d:1f:1f:86:fb:a3:42:24:30:bb:7f:b6:40:a5:76:ed
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 23:cc:ac:03:86:07:ec:4e:00:b0:b3:2d:14:41:84:bd:fb:c3:3a:1b
Fingerprint (sha256): 94:b2:fa:b5:64:ff:f6:2a:1b:3f:51:fd:23:11:6e:b0:c4:ab:69:5d:4e:f4:c4:16:f4:bc:7a:ac:0f:38:74:f7
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate *.freedombunker.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.freedombunker.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.freedombunker.com
freedombunker.com
freedombunker.com
Other certificates including the domain name freedombunker.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for *.freedombunker.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFBjCCA+6gAwIBAgISBGL6nV2AuD7xOxMsmeEzLeXcMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzA5MjAwMDM5MThaFw0yMzEyMTkwMDM5MTdaMB4xHDAaBgNVBAMM EyouZnJlZWRvbWJ1bmtlci5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDYdkc+v7NkVe5rqbihM7zpMUHb0QscRtjfziQQU64nfHQUoc5xivOJQ6Zk BSz19aqNTnS1+ZQhX6hTxpk3svpayjpZ3ugCIbOBUrmsroy2yyZ6OliswEzkw4cS xUTd5DW0ucPyNVcWdptLL333oIwfoqO3RhvSBfPn5RoF3oxoTHyczIM0JplaDaXG DgRCppjgA1tAaaN2bQMdUeoVC5hSVnR5Hok4ha5rSD6yGYiC+r4hN3/8F0n0r/z+ 9+8utZMI8aUFfltY3KlTXdWc6wQlaCdzw/Q+K+0+E58shh+Aj+LelJWyf0vKbk3t PHLlEMVJfmPsf5Hx+v9k3wHOmkzVAgMBAAGjggIoMIICJDAOBgNVHQ8BAf8EBAMC BaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAw HQYDVR0OBBYEFCp3tF8NHx+G+6NCJDC7f7ZApXbtMB8GA1UdIwQYMBaAFBQusxe3 WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0 cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5j ci5vcmcvMDEGA1UdEQQqMCiCEyouZnJlZWRvbWJ1bmtlci5jb22CEWZyZWVkb21i dW5rZXIuY29tMBMGA1UdIAQMMAowCAYGZ4EMAQIBMIIBBAYKKwYBBAHWeQIEAgSB 9QSB8gDwAHYAejKMVNi3LbYg6jjgUh7phBZwMhOFTTvSK8E6V6NS61IAAAGKsD3a vAAABAMARzBFAiEA/kJJZtj9p5GouvZq303p2hK+oVH85hoMTfBIeWj6VnICIBvX 27MzMlHiRVa6b1Nm/dwSp7I8jqoO4FYRIdistWX+AHYArfe++nz/EMiLnT2cHj4Y arRnKV3PsQwkyoWGNOvcgooAAAGKsD3bCgAABAMARzBFAiEA9M1uiluPPgep6l5A IG6sBS2ejqTY7YptjFcdMwwmXCQCIBQp1r18v7uOU0riGEfxXngUQ7U7FkL2+yDL WHD3uq7CMA0GCSqGSIb3DQEBCwUAA4IBAQB0OBp0vMt6uujoj0WEF0LLgOfI4h+e flV+BDoqCVMEciPKQb0FIQF26MHgVkBDaMGQ6psqnKvSs1jjSgwxV88JRJeeq6Ju Ef2STtCZoNo5PZVnltm+i1VUWzD6XJKiGAT0MekmhkUua3VQwfoyYCj+oW0vXELK 8w9RNjOO0ebu1fHMzil4FqIOJCZqLWhIi0ZsYL6pxd3zWJhQMUm0ewvQFVTO3aPN ctUf8BOEEJnYOMrU4oMtRLG6+TlAuqNV4jQVmStzuwfcZNS0/3KxOQC2G2icsZHA xji+HVhpX+gBtgN9HP3y11DbClR3KN2AF6lLCryKcaAs1tK+dE3v7f1Y -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2HZHPr+zZFXua6m4oTO8 6TFB29ELHEbY384kEFOuJ3x0FKHOcYrziUOmZAUs9fWqjU50tfmUIV+oU8aZN7L6 Wso6Wd7oAiGzgVK5rK6MtssmejpYrMBM5MOHEsVE3eQ1tLnD8jVXFnabSy9996CM H6Kjt0Yb0gXz5+UaBd6MaEx8nMyDNCaZWg2lxg4EQqaY4ANbQGmjdm0DHVHqFQuY UlZ0eR6JOIWua0g+shmIgvq+ITd//BdJ9K/8/vfvLrWTCPGlBX5bWNypU13VnOsE JWgnc8P0PivtPhOfLIYfgI/i3pSVsn9Lym5N7Txy5RDFSX5j7H+R8fr/ZN8BzppM 1QIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 382129939771308294217889130750471454975452 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-20 00:39:18 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-19 00:39:17 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.freedombunker.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27325799076810952573763993650846914464813746721824756365933659450766286222589764097568430479860658045959184139233156499811038889980654577726470274938960627538512832027583510948430183469171104105141440601860164939664220666284964100466216468202147555998082907185309277580631631182993936096942452193074269965202236391763326053843122382007690893004950327407758492378788988376776802183719740380529398966245818425328022663542743830404428386855118764200436154691685123069778085708233937935049281845838414246685682912456149227001493074742835595560930952390433135700033527767472209828264661387939012740659423267967910666718421 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 2a77b45f0d1f1f86fba3422430bb7fb640a576ed . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.freedombunker.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freedombunker.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f00076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018ab03ddabc0000040300473045022100fe424966d8fda791a8baf66adf4de9da12bea151fce61a0c4df0487968fa567202201bd7dbb3333251e24556ba6f5366fddc12a7b23c8eaa0ee0561121d8acb565fe007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000018ab03ddb0a0000040300473045022100f4cd6e8a5b8f3e07a9ea5e40206eac052d9e8ea4d8ed8a6d8c571d330c265c2402201429d6bd7cbfbb8e534ae21847f15e781443b53b1642f6fb20cb5870f7baaec2 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 0074381a74bccb7abae8e88f45841742cb80e7c8e21f9e7e557e043a2a0953047223ca41bd05210176e8c1e056404368c190ea9b2a9cabd2b358e34a0c3157cf0944979eaba26e11fd924ed099a0da393d956796d9be8b55545b30fa5c92a21804f431e92686452e6b7550c1fa326028fea16d2f5c42caf30f5136338ed1e6eed5f1ccce297816a20e24266a2d68488b466c60bea9c5ddf35898503149b47b0bd01554cedda3cd72d51ff013841099d838cad4e2832d44b1baf93940baa355e23415992b73bb07dc64d4b4ff72b13900b61b689cb191c0c638be1d58695fe801b6037d1cfdf2d750db0a547728dd8017a94b0abc8a71a02cd6d2be744defedfd58