beckmann.org

Issued by R3

About this certificate

This digital certificate with serial number 04:3c:61:2a:04:b1:bd:f0:74:7d:fe:40:ae:65:77:e3:26:eb was issued on by Let's Encrypt.

With 15 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=beckmann.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:3c:61:2a:04:b1:bd:f0:74:7d:fe:40:ae:65:77:e3:26:eb
Serial Number (int): 368995239029568296235533229057694467565291
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 4b:4d:a1:5b:fd:e6:9b:7e:f2:1e:f6:85:b0:bf:8d:78:bb:61:0d:ca
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 0e:3e:97:7f:41:ca:0c:64:90:20:72:f2:e3:71:5b:98:d3:12:82:70
Fingerprint (sha256): 99:d8:c4:bc:90:1a:c4:58:31:b8:0a:91:dc:1a:ad:9b:47:b4:4d:f9:26:ee:fb:04:0b:2f:16:c5:44:33:74:0f

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate beckmann.org

15

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for beckmann.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

barda.com
beckmann.org
bostonforvip.com
cafeisle.net
crisisfinancialanalysts.com
healthyhomepoints.com
hotsexyswimwear.com
jamiewimer.com
planforus.com
prairiecounty.com
realestatenichemarketing.com
rxsugarforpets.com
shipwrecksguru.com
trellbeaty.com
vinificio.com

Other certificates including the domain name beckmann.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for beckmann.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8LjdaTJNzUx5ULxmZM/
XL9o4Gvrd+ub8K6OimaV4x1MaIF/R/DeMn6YPH2y3A8E3M1D6aOmIgHQvNzgavb5
IcZQPyCCj5By3y/FQb3xm6Jmu/2QEJqkcuvXgau9eOoOOhr/LpNkLCnl6ti4bCH0
OCc5G1G55DJ9y0ZDvy1ABjigFNC1oXvUuOtxWUf9rFUyr2QJGbAkmbdQ0CI21SkN
5Ti3Hp4ljWy1gE87o0124DXR0NIls8vmuIT2GQhgMiWoBJkHtYxi+VO+L1XzQfVq
B4hmfqQzrgHXvDPCqnA22oaReb0HSaID9UGaH9Oz+i/ypvRLp6YE6Z1W+CndVLFZ
sQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 368995239029568296235533229057694467565291
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-13 06:48:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-12 06:48:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'beckmann.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20672946817459040011877554820857335963745625866829755834343727365239918815294848655966512961175132809103446429558945208449888654718958324392942329276915718402175199925828476689424037978103436529926209422919494239257162936826234662622222618621030018820494718291283831459137080636675471442097136216207029810056277874617151152298868401920653874461620024917495772339497914561352928457993266478840179076452964882206298614005012965985318923341237122709766153098834378868074593203343511447753317423886216592051453289108246257364950648200919311968970058744191886150556899688264053801157551181159064725465182045923337556810161
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4b4da15bfde69b7ef21ef685b0bf8d78bb610dca
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (285 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beckmann.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bostonforvip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cafeisle.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crisisfinancialanalysts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthyhomepoints.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hotsexyswimwear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jamiewimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'planforus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prairiecounty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'realestatenichemarketing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rxsugarforpets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shipwrecksguru.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trellbeaty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vinificio.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f200770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d01cae19f0000040300483046022100876d51e3d80f363bd9684fd289a443f27031009609cacb8393d6164151ec8a3b022100db26ffb250ccad25b0c6880bef2c78edad126606363d22525c4e1b48fb4be07000770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018d01cae1f90000040300483046022100ed483a0b7110d8f7ceb9f53e52a18fb91993b0c48d2c3496aa790737b9536a9d022100dc2b6d6afa5021546f4f58a505ac5e49445314910b3cf24ad9a0801e896f20e7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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