republika.org

Issued by R3

About this certificate

This digital certificate with serial number 04:3b:bd:a0:70:6f:f1:11:1e:20:62:96:9a:7b:77:92:4e:95 was issued on by Let's Encrypt.

With 17 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=republika.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:3b:bd:a0:70:6f:f1:11:1e:20:62:96:9a:7b:77:92:4e:95
Serial Number (int): 368777860514575878832678785159410161438357
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 68:af:19:2f:6e:86:d0:cb:4e:de:83:30:9d:9e:26:60:32:71:c4:71
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 7a:e4:0a:76:41:a2:c6:8e:df:09:43:17:0d:0a:64:c3:84:e4:4c:bb
Fingerprint (sha256): a3:c1:c7:c5:e2:56:cc:09:4e:ea:c3:21:0e:2f:37:21:d8:5d:91:ee:cd:ad:c7:1c:44:27:de:2e:ca:63:d3:fd

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate republika.org

17

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for republika.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bigbuyasia.com
bodylife.church
dfwprivateschoolguide.com
duluthdivorceattorney.com
federalcriminallaw.com
forex4vip.com
halfmarathonscalifornia.com
hittinglab.com
lgbtqgolf.com
muranogas.com
naturessemaglutide.com
operahousetoronto.com
oxnardlandscaping.com
republika.org
rxsugarcaramelsnax.com
sculpit.auction
webmasteranalytics.com

Other certificates including the domain name republika.org

(limited to 100 certificates)
rayon.in.republika.org
republika.org
californiaprivateschools.net.enerpac.asia
tvfour.co.za
republika.org
republika.org
thebiblecourse.ca
republika.org
tvtwo.co.za
republika.org
republika.org
tgirlcanada.ca

Certificate

The complete raw certificate details for republika.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2KPIw8G1lNxPg90s6cob
vTV2APA8cNfLiUa3wPWYkkGE8BvMJ/g1vYLi52xkC7+5NeuPHgb7TtEVFo797ROk
KEREK2NGdx6qfOYlfecj1plb5+paVBGB0z2gdl/tDz8Zdv0m/gG5Ia3dbFUTxdJE
x6CgPkj9kwP5KVXB8e1BQggF4Kng2OihGQlMloERW6lHM7Aa+rt3mS6GjsPsoQ9D
ro5QaS7rzXppD1hfiesbklUZ0vukBrRdvH10xqUtu3HTzF0PrKjVsWKVV5/Yhx9n
F92RWRuP020WZI2uL9iyi4QTZvdRDUU49CWKD/Y/QNBdylabcc/JiNXtTbPSaGf0
OQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 368777860514575878832678785159410161438357
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-17 18:20:38 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-17 18:20:37 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'republika.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27348238890091637329512928909495911406509861834474724224172082479349877139149317712723975405105887323089465572600893003857409198046595875334217881127248212310567139130733937655071663796658519806973370187609410244866371512254387048172976984578191930364079957166894871173685671898896492627514470765793962814384219720615333197728310401592147289908564089872111219171082331908196843567712950247234044440140219360715906252094548376399881513787563447884791632710502963331009044621878515297914259506425110660604644636305975165076524218982664273458130741020766092952039270550469643702214167890072857062443549266465116299719737
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							68af192f6e86d0cb4ede83309d9e26603271c471
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (355 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bigbuyasia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bodylife.church'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dfwprivateschoolguide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'duluthdivorceattorney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'federalcriminallaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forex4vip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'halfmarathonscalifornia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hittinglab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lgbtqgolf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'muranogas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naturessemaglutide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'operahousetoronto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oxnardlandscaping.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'republika.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rxsugarcaramelsnax.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sculpit.auction'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmasteranalytics.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018db883717e000004030046304402200b13bf2a52da4f980ab764cbb939b27637483953109bbc3fafc4cd5c8d4e0d1402206216bcb83ecb813de7a0b9635f4a7e599865bcd7ec4cc96107ca014efcbca66c0077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018db88375a00000040300483046022100c351cc5d5dbb297a652145e1a8f8db0fddcc91b4fee1068f8d278968a31494af022100c04882e05072ecee2190b32f03b7de8e05b5f46737f81f42c5508834a8636a94
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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