saintflanagan.org

Issued by R3

About this certificate

This digital certificate with serial number 03:1d:a8:33:39:1b:31:2f:f6:ec:d3:73:ac:5e:aa:a8:59:b9 was issued on by Let's Encrypt.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=saintflanagan.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:1d:a8:33:39:1b:31:2f:f6:ec:d3:73:ac:5e:aa:a8:59:b9
Serial Number (int): 271428622704671337070262398939331979401657
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 8c:49:84:8c:1d:19:b6:c9:d2:7b:cc:98:c4:6e:f7:fd:07:d6:4c:e9
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 59:94:a3:b9:7c:88:91:b1:6a:bb:93:dd:03:66:af:49:71:57:51:c3
Fingerprint (sha256): 9b:45:c2:bc:68:b6:15:c9:1a:b9:e8:45:d1:09:a4:89:f5:b2:90:97:03:49:df:43:b3:70:c9:65:a8:b5:99:27

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate saintflanagan.org

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for saintflanagan.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

coloradocountyfarms.com
profoundstrategies.io
saintflanagan.org
therivercruiseguy.com

Other certificates including the domain name saintflanagan.org

(limited to 100 certificates)
5272653.ca
marquee.lighting
saintflanagan.org
vplayer.co.za
lng.world
lng.world
5272653.ca
5272653.ca
lng.world
saintflanagan.org
lng.world
lgbtqia.bible
saintflanagan.org
5272653.ca
5272653.ca
www.cbbt.bible
saintflanagan.org
shadi.world
fifi.ng
www.cbbt.bible
5272653.ca
5272653.ca
matthewjamesbooth.org
5272653.ca
domain.limited
lgbtqia.bible
saintflanagan.org
5272653.ca
lng.world
ipv4.exchange
ripplingwaterscamp.com.saintflanagan.org
shopatamazon.world

Certificate

The complete raw certificate details for saintflanagan.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2j2qfRYt3jwqHNdDWr+
+WAvrBUNTPAUelL7op3dcCR60LMv0KPZ2cNZj/4Ki0mSMOLreqpFOK0IBXCFf5SS
7RTPD2le1dcrf+O8x460JMr76E/IE56LOiJ78FTp7+iCwx8FOnrsygbbOTrRertG
pNDjKDghuKt9UrWF+UfTLNB98RBPLAZlsTgPvZp0RgX8bJ1t9xcaLadaAvBltq62
uUmWoTorN0tOawPjuxwv0DRkb8Hvblj71wzsGNEvnSdIWKLA0wrKYKLK2QN19esL
E2gOBXksHPVEpOM2Qs1crwrx9Mfb14xn4lRGjEVoM88qSLFkSS2Uzfo2a6s4vA50
9wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 271428622704671337070262398939331979401657
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-21 12:33:32 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-21 12:33:31 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'saintflanagan.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23153369254926957269764303959982246245229945094435192176062787271950719376350583687134559314510157065133250443635578480365176805061314302524334571123080126345440254208001402470308258939652358645677633302347152493076805633399789983834434711291973188982736658551445950266103652576684240454509312513599651459899526236978072699808780645363912188615129240783448773453313231843260300849847184249420091285852593619653670363441783257712049162320590909752867357159151324061926403595617791680962502608548689077264966118524380490041022169512431308375050743777619927930971968968245495069506989880916737926952045432724411053405431
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8c49848c1d19b6c9d27bcc98c46ef7fd07d64ce9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coloradocountyfarms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'profoundstrategies.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintflanagan.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'therivercruiseguy.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018dcbdf1a50000004030047304502203eb75dd726bc88e790a6c7e23b1b8dad1d7ada92ada4d2a5ce3770c5b7d6ca920221009c88bc79f89a3a4a9febe2f4e393719534943328b33986b3c9f8e08bead6acc80076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018dcbdf1a5000000403004730450221008e6a5973d38344c6782eb0fc1b2a027e0bf46f362777b6e984a698af5342295002206ae8b7992bb1512500c68765230ef5385dabbffa477f5490cbaa0b74ae18f751
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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