askchattanooga.org

Issued by R3

About this certificate

This digital certificate with serial number 04:ac:99:fb:4f:f4:fa:8f:45:ad:24:20:b8:e6:f6:d4:34:5f was issued on by Let's Encrypt.

With 16 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=askchattanooga.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:ac:99:fb:4f:f4:fa:8f:45:ad:24:20:b8:e6:f6:d4:34:5f
Serial Number (int): 407182387609028561472332254473651077002335
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 93:d0:fb:b0:4e:44:08:ef:24:3a:3d:6c:7f:34:a1:e5:a0:c8:dc:4f
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 1c:45:f2:3f:b5:e0:17:ca:7a:8e:ad:9b:e9:a8:ff:44:fb:15:06:09
Fingerprint (sha256): 9f:26:20:17:8f:ec:06:14:e9:6d:d5:4f:1f:1d:71:0f:49:2e:27:ab:31:f1:19:4b:18:2c:de:1d:a0:02:58:dc

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate askchattanooga.org

16

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for askchattanooga.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

63017.net
actionvideoanimation.com
alluloseisacalorierestrictionmimetic.com
ameriblog.com
askchattanooga.org
blockchain2ls.com
bobbyusher.com
dyerhomes.com
etexascoastalbend.com
fiftystatesroadrunning.com
foreverdee.co.uk
gwaliordentist.in
newllano.com
retrolighting.com
sanantoniohomespace.com
stlouismetroguide.com

Other certificates including the domain name askchattanooga.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for askchattanooga.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA89CJ4VsWTw3TSG7O65A7
PQ4WeNnTerdjO7uIVXEK5Rl0pGhuA6aXRwrayWYG149dFVMbQJBvtu/i3ilHpcHl
WeU1cxceojCP9zZv8kC6L3MkVOR9+KDaBpJ+ep6YcMnvHqfVo4xLOWXHxROMqgpw
ijE1WHQktPb9gffc+IhAw16Z/F+JlpHg9QaJaNjNrK8rrhBZAea20vSMV5A8sns1
zqKkCiINzFI7KOKEnEybme84xBt0U6YafvVK4iZQi5X95dmXyNSJunHLyjniXSC+
oYCvYNeqbRYgO/BWNY/x9nkO5ixXToFmyiLZp4llId3SKHgs/DpRmgWqZWdn5SNl
2QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 407182387609028561472332254473651077002335
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-14 22:58:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-13 22:58:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'askchattanooga.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30778742320584403070439443185896381856147786557578809815610526105768736126654379498220773623846594759501390212629586529214051582618803927796552598475723965697791359792490876699897112033743420575649898785715797009070300400397975327004155137583215676683187254308212776316626423128171495600990049928318696006720806273217193924375145457947649618776957908923119862161507061390740567979244354367191331688239913121351232064803873372063526729269004241230237556020797414555272032724406797263160947196103257314028362479813985044312951117775818932120301667033172382577735957442300898813691399376501396177144519665450618687022553
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							93d0fbb04e4408ef243a3d6c7f34a1e5a0c8dc4f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (337 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '63017.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'actionvideoanimation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alluloseisacalorierestrictionmimetic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ameriblog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'askchattanooga.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blockchain2ls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bobbyusher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dyerhomes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'etexascoastalbend.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fiftystatesroadrunning.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foreverdee.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gwaliordentist.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newllano.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retrolighting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanantoniohomespace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stlouismetroguide.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018edf0c0a280000040300483046022100f522b8e1ef558e535827590320b5739565591dd034ee5488cc7e2eee18693abe022100b79ed454053b7e2497b18fa435d10db8f4f5e33ec90b9f2239bbb93b0266da230076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018edf0c0a2a000004030047304502202897735cbc338e1738794292fe13521301e1233b4e94b73f65dde27a7bfabdcc022100d5d8068de7e55adc396a3ba563a0d43816ba9433554be6f5c47608c25550e592
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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