atb.org

Issued by R3

About this certificate

This digital certificate with serial number 03:38:72:5f:a2:90:5e:ea:a9:d2:19:ec:d6:5a:6d:ed:f2:2a was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=atb.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:38:72:5f:a2:90:5e:ea:a9:d2:19:ec:d6:5a:6d:ed:f2:2a
Serial Number (int): 280544698899762921587101710442490667856426
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: f8:2c:99:49:9a:0d:e4:40:e8:33:3e:67:68:51:53:a8:b5:6e:6c:30
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 19:ae:1d:55:65:80:ce:cc:47:5d:7d:8a:d3:df:0e:9c:9a:51:c0:75
Fingerprint (sha256): a0:8e:84:2e:88:03:f0:c7:b4:ee:56:75:95:95:49:a4:cc:c7:9f:d5:6d:ec:0b:2f:13:e6:c5:fa:f8:74:9b:4d

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate atb.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for atb.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

atb.org

Other certificates including the domain name atb.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for atb.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgISAzhyX6KQXuqp0hns1lpt7fIqMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDAyMjcxMDI3MjdaFw0yNDA1MjcxMDI3MjZaMBIxEDAOBgNVBAMT
B2F0Yi5vcmcwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDoafwqnMb9
U1akViLGsFiutnqSO+fvDB7KxSKuWlP7qgF7ZyDqVCtu4Tk25l8MGeTXWs+nqmUT
aEsstJYCtD8tXHoQkGf/aXLOos8C3yO25bSHyZT303oGVD55pOfvj3hoeh0ce0E0
DpzTvBSbL+gsH46h/1PDrqu94S5O7iSzKfpcq/HLatNXVZ6tVVS9cOYSuKPtEG3h
oqmiIj3TJIa0jSvXDUmFLLND4Bahhp21Bruv9JPOyLApyv2VEYD9xPR5LFdTPOMy
uLcLGrdspJ1jlGPTY6aVbNodGzhTtonIkSYbixFtmrjKBBmYWSfl97YQ7yVSDdOr
e3gjvK8hz4l0f7nqICmGOnR3/RzkOwJKPW0qzyovmBueMoePTN6vmjMoAFi1tFr1
JT86ubdF5oWW0L7b/sYbUr1LRY2pAbPTCOIQHZBFx85k/8XM7U/mAB5plb5ZJjpa
iqEWdeueY+FFqY4EzUsZvV+DR16BPX0r07d501m1jJh8jzEQqx1m00SQbPotSAaq
DPDBgol+SlnNTB92nqImaFV6FOI+M+kMiaIrF1jY2NOxZTZFwelREE1dcICvb9Lb
G8UgtK2edsgYNo6izp9QzfLkO/iHkKx555ecW6PxtgZRPWIFeQFr1+u1IELJgR/b
EaMRMbyr0HKb0Yc7I5rbAn7Ku3jDrD6WYwIDAQABo4ICCDCCAgQwDgYDVR0PAQH/
BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8E
AjAAMB0GA1UdDgQWBBT4LJlJmg3kQOgzPmdoUVOotW5sMDAfBgNVHSMEGDAWgBQU
LrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGG
FWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmku
bGVuY3Iub3JnLzASBgNVHREECzAJggdhdGIub3JnMBMGA1UdIAQMMAowCAYGZ4EM
AQIBMIIBAwYKKwYBBAHWeQIEAgSB9ASB8QDvAHYASLDja9qmRzQP5WoC+p0w6xxS
ActW3SyB2bu/qznYhHMAAAGN6lHTEQAABAMARzBFAiEA3OeNqWTjePLQzmimmRaH
9vDzbR8O4Wl7SFZSWlgZtUYCIB/KC1s4HvC9WdST9TS7bX0Y0Vla2FreK7l3xXqt
FCZoAHUAO1N3dT4tuYBOizBbBv5AO2fYT8P0x70ADS1yb+H61BcAAAGN6lHTFQAA
BAMARjBEAiAq1PgN237KXlR6uoytGiUcDaoOVciDFVkZ9q7MtluB0AIgBph5TVbq
Yqlo8gZXdSeb3VF9dGLJKWlFsKyZYV9Jd+4wDQYJKoZIhvcNAQELBQADggEBAKiV
YVysE7JiuHnLFt8qT6ppViyYBXhprNxUBuilkRtUCFGhgj1ohTHhYy1fi4Gp29RB
6RuKhgT5yFj64vKhYJcVNJyndRL3e+zFDwKgTs105P6Ri80vH8lbPewtHF+LO4Ae
vXYtBTDrPrf60zDVr2g/oXvVes63VxYnJTdQ0HyS2BOpvqw+vvniC5D31V3zkhR4
pt33MsrGfYwxiqZYa0xm0xepnBxbcmK4M7Cii51AEVCTvVWjzPDB43DwTJY4N+IK
u5TIrtA0jOcBE4LAKRjiJctNJbdVnmyu2tuUcw/xkKjxJEeHgJ+V53QSdNJkETtO
Pt2GxJWweiUE/u7OiWU=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 280544698899762921587101710442490667856426
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-27 10:27:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-27 10:27:26 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'atb.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 948166412762749251182204480677338731547829202474776051463034449100648292381356981729302104546659303547952984595202061823459244168147034627182137445893540498880275951183522253887073209436960223049595005635103806941015856584650298101337719043194237441410166947241114284377776196538852566212350160406728796319438073370256826604921716446956651211049158013304986830797303971957621040357130177266237277728115395157011940153812841328034884416197460058314046849465160735060484296859974400005539786725770866281371453387703342917366747224414919709580944665685934900540112090220814528797778901439048872248905595902457662996136604637865603839961633973695752241248371345233631144437264765808316128933708133848571179330221497270310256729465114082872585607853375706317032843218481004141566228353969730513409996195216207574094944088924586692030528080091410701428917969758235699911612740117812934033094486923976619177691539006585094153781059568112457066954559154664445297451720692938822530283671828873540942058619280959713782461826743394708772539494233943452846260763831556323471630035435838084134638274037827371625021294992116357930377763820360840999655969546364894997271771611775796588646553911570715370152480118626947760832614014514571312162051683
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f82c99499a0de440e8333e67685153a8b56e6c30
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (11 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atb.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018dea51d3110000040300473045022100dce78da964e378f2d0ce68a6991687f6f0f36d1f0ee1697b4856525a5819b54602201fca0b5b381ef0bd59d493f534bb6d7d18d1595ad85ade2bb977c57aad1426680075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018dea51d315000004030046304402202ad4f80ddb7eca5e547aba8cad1a251c0daa0e55c883155919f6aeccb65b81d002200698794d56ea62a968f2065775279bdd517d7462c9296945b0ac99615f4977ee
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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