allaboutltc.org
Issued by R3
About this certificate
This digital certificate with serial number 03:15:cd:63:ca:9e:3c:8d:ed:cd:2d:df:4a:db:00:39:de:51 was issued on by Let's Encrypt.
With 12 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=allaboutltc.org
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:15:cd:63:ca:9e:3c:8d:ed:cd:2d:df:4a:db:00:39:de:51Serial Number (int): 268755797386728880671489851992293355675217
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 21:e5:06:00:bb:f4:6e:19:c0:0d:0c:28:c5:f9:b3:39:bb:dd:c0:0b
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): c6:e4:c8:60:0e:84:82:80:8c:4e:d0:78:11:f4:b0:2d:c6:ff:22:7a
Fingerprint (sha256): 98:50:06:75:66:02:27:eb:56:62:51:e8:95:4f:7c:49:07:3b:dc:3b:3d:54:11:8d:04:e3:a0:20:ed:4f:a9:d0
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate allaboutltc.org
12
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for allaboutltc.org
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
3517stonecreek.com
allaboutltc.org
arbitragefund.co.uk
bettie.us.edencottage.com
bigdaddygunbroker.com
ecurrencynetwork.com
glennherman.org
just-say-satoshi.com.corneliuslistings.com
okchome.com
rarepreciouscoins.com
southwebster.com
wvtravel.com.navrita.in.lowermakefield.com
allaboutltc.org
arbitragefund.co.uk
bettie.us.edencottage.com
bigdaddygunbroker.com
ecurrencynetwork.com
glennherman.org
just-say-satoshi.com.corneliuslistings.com
okchome.com
rarepreciouscoins.com
southwebster.com
wvtravel.com.navrita.in.lowermakefield.com
Other certificates including the domain name allaboutltc.org
(limited to 100 certificates)
syllabus.marketing
starband.ca
goldenoldies.ca
starband.ca
starband.ca
allaboutltc.org
allaboutltc.org
allaboutltc.org
tksimplex.cc
fifa.fund
starband.ca
register.cubscoutpack136.org
allaboutltc.org
allaboutltc.org
starband.ca
allaboutltc.org
allaboutltc.org
kiesza.ca
worldofwellness.life
allaboutltc.org
starband.ca
sanus.world
allaboutltc.org
allaboutltc.org
starband.ca
starband.ca
starband.ca
erin-gee.media
parcel2go.co.za
allaboutltc.org
starband.ca
starband.ca
starband.ca
goldenoldies.ca
starband.ca
starband.ca
allaboutltc.org
allaboutltc.org
allaboutltc.org
tksimplex.cc
fifa.fund
starband.ca
register.cubscoutpack136.org
allaboutltc.org
allaboutltc.org
starband.ca
allaboutltc.org
allaboutltc.org
kiesza.ca
worldofwellness.life
allaboutltc.org
starband.ca
sanus.world
allaboutltc.org
allaboutltc.org
starband.ca
starband.ca
starband.ca
erin-gee.media
parcel2go.co.za
allaboutltc.org
starband.ca
starband.ca
Certificate
The complete raw certificate details for allaboutltc.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGATCCBOmgAwIBAgISAxXNY8qePI3tzS3fStsAOd5RMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDAxMTIwMDAyMDBaFw0yNDA0MTEwMDAxNTlaMBoxGDAWBgNVBAMT D2FsbGFib3V0bHRjLm9yZzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AOM+/KMK5jM393NCc6i8zoeExbHtIo9ReogFGT2GeqZORxQb6XlOUK3HEGBE0THG LFBchq36wKwkMfmgeJ9TZk+dT+4TIPxWYkZIblwQdSTWFmvg2ifKuTkdYSbP0img 2Y6mWm+SxZ4u4vAz+CMp2JfyJ3HxVYvkMq1gUMm5I5NskboHJ/XA8Cz6/LWCx3w1 7a/4unGK4gCuGYMxgnc4ydVKMyH++52XVXfCKrgcpB7pAADTfkLkNTQuc68eme2L sEE1kwTzx/JBz1fiBOxnzhmZKstfTWMYjFbURydqZoRrO+I7Jy4By4obc5kuFAqe lofxbGGRdTKYo90uofd9eKsCAwEAAaOCAycwggMjMA4GA1UdDwEB/wQEAwIFoDAd BgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNV HQ4EFgQUIeUGALv0bhnADQwoxfmzObvdwAswHwYDVR0jBBgwFoAUFC6zF7dYVsuu UAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRwOi8v cjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNyLm9y Zy8wggEuBgNVHREEggElMIIBIYISMzUxN3N0b25lY3JlZWsuY29tgg9hbGxhYm91 dGx0Yy5vcmeCE2FyYml0cmFnZWZ1bmQuY28udWuCGWJldHRpZS51cy5lZGVuY290 dGFnZS5jb22CFWJpZ2RhZGR5Z3VuYnJva2VyLmNvbYIUZWN1cnJlbmN5bmV0d29y ay5jb22CD2dsZW5uaGVybWFuLm9yZ4IqanVzdC1zYXktc2F0b3NoaS5jb20uY29y bmVsaXVzbGlzdGluZ3MuY29tggtva2Nob21lLmNvbYIVcmFyZXByZWNpb3VzY29p bnMuY29tghBzb3V0aHdlYnN0ZXIuY29tgip3dnRyYXZlbC5jb20ubmF2cml0YS5p bi5sb3dlcm1ha2VmaWVsZC5jb20wEwYDVR0gBAwwCjAIBgZngQwBAgEwggEEBgor BgEEAdZ5AgQCBIH1BIHyAPAAdgA7U3d1Pi25gE6LMFsG/kA7Z9hPw/THvQANLXJv 4frUFwAAAYz7MK8QAAAEAwBHMEUCIAwNp77ka+389topESRyohTvEP7Up7J8mWXn OuIqkFo1AiEAwzI4nsCY3n0NOTlVIiKwUNJsOUZC0rgkEIHytQJpCf0AdgB2/4g/ Crb7lVHCYcz1h7o0tKTNuyncaEIKn+ZnTFo6dAAAAYz7MK9UAAAEAwBHMEUCIQDq V9KpKNZ39LpoerdpPKwZImn7099jBKkNGpxCxEgSlQIgH20h9mGGj5SAhKTV5rOO ONVg/32J19PdEdrGWAxuq50wDQYJKoZIhvcNAQELBQADggEBAFnM/w2g25lPUE4f ipiM3mKfIbXZu6MYXcg29BIEHKTcup2Jf3ajRcMPXPLVUTnbH+jlNhmNZ6QSxcOo Ik0mAoQn4VVpT3+Qj48yB46N+RxpGUqnMsMiDfBNubN/j+x1PL2M++BsbCzt4aP8 dy20aaIgXHA/ET3HHDU5rdAJ/7ionKvMh9iTMYlOBdZAfInauMhyDKrZNiOk7Qbf nK+zOjoOZBAvx7+yYWcbSy5KvIMNY0yVXnzFcVlJq9VyynMCl96Nq75S5g/xI49q v/TC7F4qB601IvXr/8y3ga1ncQP8aPta5ZLCutPqH7vHWLGYEX3gfm73O+s93XEP 8FjYlEs= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4z78owrmMzf3c0JzqLzO h4TFse0ij1F6iAUZPYZ6pk5HFBvpeU5QrccQYETRMcYsUFyGrfrArCQx+aB4n1Nm T51P7hMg/FZiRkhuXBB1JNYWa+DaJ8q5OR1hJs/SKaDZjqZab5LFni7i8DP4IynY l/IncfFVi+QyrWBQybkjk2yRugcn9cDwLPr8tYLHfDXtr/i6cYriAK4ZgzGCdzjJ 1UozIf77nZdVd8IquBykHukAANN+QuQ1NC5zrx6Z7YuwQTWTBPPH8kHPV+IE7GfO GZkqy19NYxiMVtRHJ2pmhGs74jsnLgHLihtzmS4UCp6Wh/FsYZF1Mpij3S6h9314 qwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 268755797386728880671489851992293355675217 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-12 00:02:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-11 00:01:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'allaboutltc.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28687155206979191241956529921381371450247574814306792538335511699754017229012292872347391170161933919422379733889886100949211567810916511899960389851003904640705300386219289872900267951542412154087274521915867797995843034899967855408072403297925433135820930321597813407687749397121395542408138606488982925996998269826400888786354129026420431181850703124640042473315100820043967742021438736710120294049894635504149936558803006419137681477769763861657156270834922594712470669547898202515081319063244090168027486512501742538480842222667019777015645673698715841265045394187067215592147202365287048706895765678956457326763 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 21e50600bbf46e19c00d0c28c5f9b339bbddc00b . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (293 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '3517stonecreek.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allaboutltc.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arbitragefund.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bettie.us.edencottage.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bigdaddygunbroker.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecurrencynetwork.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glennherman.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'just-say-satoshi.com.corneliuslistings.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'okchome.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rarepreciouscoins.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southwebster.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wvtravel.com.navrita.in.lowermakefield.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f00076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018cfb30af10000004030047304502200c0da7bee46bedfcf6da29112472a214ef10fed4a7b27c9965e73ae22a905a35022100c332389ec098de7d0d3939552222b050d26c394642d2b8241081f2b5026909fd00760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018cfb30af540000040300473045022100ea57d2a928d677f4ba687ab7693cac192269fbd3df6304a90d1a9c42c448129502201f6d21f661868f948084a4d5e6b38e38d560ff7d89d7d3dd11dac6580c6eab9d . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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