halfmarathonsclub.com

Issued by R3

About this certificate

This digital certificate with serial number 04:b5:52:17:11:a5:fa:95:27:cc:82:a3:18:51:81:11:1d:2d was issued on by Let's Encrypt.

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=halfmarathonsclub.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:b5:52:17:11:a5:fa:95:27:cc:82:a3:18:51:81:11:1d:2d
Serial Number (int): 410149368616164119523259284109942888406317
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 8e:6b:ce:70:39:ed:d3:b1:d9:17:30:29:44:54:37:fe:c8:4d:ae:20
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): c6:dc:5f:49:2a:7d:93:3a:ba:61:58:35:9b:45:b4:2d:42:4c:24:38
Fingerprint (sha256): a2:47:3b:a2:ee:22:05:63:19:fa:9f:00:1a:08:af:a1:72:dc:ec:12:dc:a6:f4:0f:81:a7:de:95:18:79:02:d0

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate halfmarathonsclub.com

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for halfmarathonsclub.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

autorepairboise.com.lawnyny.com
babyplanet.in
halfmarathonsclub.com
landscapeandpools.com
nicheskreper.com
preferredwebhosting.com
stoneoakmedicine.com
windorirvine.com.www.tksimplex.net.buckyballs.com

Other certificates including the domain name halfmarathonsclub.com

(limited to 100 certificates)
foxhole.studio8424.com
registration.cubscoutpack136.org
shapefashion.org
halfmarathonsclub.com
returntogolf.org
theconcise.bible
halfmarathonsclub.com
vzh.org
earl.vc
completechina.com
halfmarathonsclub.com
tuna.vc
ericvega.com
everyshotmatters.golf
offshoreforvip.com.saleslounge.se
www.freedomprojectacademy.org

Certificate

The complete raw certificate details for halfmarathonsclub.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFtTCCBJ2gAwIBAgISBLVSFxGl+pUnzIKjGFGBER0tMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzA5MTUxMzQwNTZaFw0yMzEyMTQxMzQwNTVaMCAxHjAcBgNVBAMT
FWhhbGZtYXJhdGhvbnNjbHViLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCC
AQoCggEBAMA8vLNkuPBrBPuMJELaZ4x7FhqqbkDdAHbZT00YECGj9+KpuwuoH3Sa
H0Bpho7bibxF2hcSvdiL7dBsZJGSHp0EB6CyM4aNmDYxcADF0dx1iUPLFsOn0MLR
rer/bf1G1X5wZwEkgNyseTQQzRUuSOlFVw9u6XaCKrjtMn8460k6EgenuX+lQtzq
21HoTnFbVRkG0wJK+WWXRRDiWHRiJvzKJw42xqbdLDkoAuhb3vzWnrkYLj+Qa4iZ
NyEp+7i/ufE0+xLHq5by82kUgFo33Q3Z5CRMV43g4DCP3doH3kwNUYCOVWZ3H1TG
1p4b0G2KK/8xStVxkkNF07SzwnPhYBMCAwEAAaOCAtUwggLRMA4GA1UdDwEB/wQE
AwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIw
ADAdBgNVHQ4EFgQUjmvOcDnt07HZFzApRFQ3/shNriAwHwYDVR0jBBgwFoAUFC6z
F7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVo
dHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxl
bmNyLm9yZy8wgd0GA1UdEQSB1TCB0oIfYXV0b3JlcGFpcmJvaXNlLmNvbS5sYXdu
eW55LmNvbYINYmFieXBsYW5ldC5pboIVaGFsZm1hcmF0aG9uc2NsdWIuY29tghVs
YW5kc2NhcGVhbmRwb29scy5jb22CEG5pY2hlc2tyZXBlci5jb22CF3ByZWZlcnJl
ZHdlYmhvc3RpbmcuY29tghRzdG9uZW9ha21lZGljaW5lLmNvbYIxd2luZG9yaXJ2
aW5lLmNvbS53d3cudGtzaW1wbGV4Lm5ldC5idWNreWJhbGxzLmNvbTATBgNVHSAE
DDAKMAgGBmeBDAECATCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB1ALc++yTfnE26
dfI5xbpY9Gxd/ELPep81xJ4dCYEl7bSZAAABiplJrQYAAAQDAEYwRAIgZDLSxttX
xdzvE5kJdNaKmmkZgj5N4snTiPZkehVQqOwCIFQavvw/TVEOEBv8bleCMbY01nlb
DKJs+NhETz7DqQiqAHcAejKMVNi3LbYg6jjgUh7phBZwMhOFTTvSK8E6V6NS61IA
AAGKmUmtHwAABAMASDBGAiEA7+YPu3+W8v6KUQ9kkfZzgeJXh6dB3mCNpLfu5IjA
D30CIQCj54w2D+roxydbtKsnFtnY9c5PH1sDaXAsx5Dpxggz5zANBgkqhkiG9w0B
AQsFAAOCAQEAr2AESdYgS3U+SM6v4215gKv9so7MP7QtLUz4b31KYBQUoImL/M/L
pGzc95TVSOrHu19Kt698Xs4WDpvR07j5nhsUHPAMsC64jbp5sys5eX7p+JE04/sr
EOHLrGUmm6ov4ntJHfJtXCf20LLt9KYHUKWQJGLdHPlTrVfb5rLchcrJP7Qsl+oz
41VUOAtuOTWUF0P2FumcbdKvU4zHFKWV1OpdhGG6hA0RdWyLClbPWiHBfzwu0/Cq
Iu3MvGIUjWw6iNMGCa+PyetPFeNm+KRJGFBNV23Q/SZSrpUAR+TbEgXgROyIR8Cy
aer8TBxymq48bqCUjq2Kdm0IGsSDGF9jvw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDy8s2S48GsE+4wkQtpn
jHsWGqpuQN0AdtlPTRgQIaP34qm7C6gfdJofQGmGjtuJvEXaFxK92Ivt0GxkkZIe
nQQHoLIzho2YNjFwAMXR3HWJQ8sWw6fQwtGt6v9t/UbVfnBnASSA3Kx5NBDNFS5I
6UVXD27pdoIquO0yfzjrSToSB6e5f6VC3OrbUehOcVtVGQbTAkr5ZZdFEOJYdGIm
/MonDjbGpt0sOSgC6Fve/NaeuRguP5BriJk3ISn7uL+58TT7EserlvLzaRSAWjfd
DdnkJExXjeDgMI/d2gfeTA1RgI5VZncfVMbWnhvQbYor/zFK1XGSQ0XTtLPCc+Fg
EwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 410149368616164119523259284109942888406317
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-15 13:40:56 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-14 13:40:55 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'halfmarathonsclub.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24267705139845224480231852191090016168896437123639674381158014795346964081012961694487582429865722707884778401912740759333486181271839882183095033131473563456032630616903852035694923062772459266693892763988581995410307214813982066827205457368581798055864273079682017539833452875113255485872549264558782632662981427451855715737823638604104845158167070232226419897729533675456975842225039273813091685754217558170508980343619832248718150434626135606160625867003322255556831122108327387897733890318443441781791222072202954049487211794205291602314763498345113829788208994949158723398577631648072155468695650372820003807251
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8e6bce7039edd3b1d9173029445437fec84dae20
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (213 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autorepairboise.com.lawnyny.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'babyplanet.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'halfmarathonsclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'landscapeandpools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nicheskreper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preferredwebhosting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stoneoakmedicine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'windorirvine.com.www.tksimplex.net.buckyballs.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018a9949ad06000004030046304402206432d2c6db57c5dcef13990974d68a9a6919823e4de2c9d388f6647a1550a8ec0220541abefc3f4d510e101bfc6e578231b634d6795b0ca26cf8d8444f3ec3a908aa0077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018a9949ad1f0000040300483046022100efe60fbb7f96f2fe8a510f6491f67381e25787a741de608da4b7eee488c00f7d022100a3e78c360feae8c7275bb4ab2716d9d8f5ce4f1f5b0369702cc790e9c60833e7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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