munity.com

Issued by R3

About this certificate

This digital certificate with serial number 04:1e:c0:52:e3:b3:1e:70:0c:10:12:60:fc:00:a0:e7:3c:b2 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=munity.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:1e:c0:52:e3:b3:1e:70:0c:10:12:60:fc:00:a0:e7:3c:b2
Serial Number (int): 358913256896500485319793716580141408664754
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: f7:a8:96:11:e1:17:ba:cb:3a:02:df:1b:fc:fe:44:92:ed:c8:fb:ab
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 3d:00:a1:2d:0e:8d:22:a4:47:ad:37:50:a7:84:fb:02:17:83:02:c3
Fingerprint (sha256): a5:14:95:3c:8c:08:fd:50:eb:67:4f:ee:dc:f7:95:da:93:fc:b7:8e:1c:03:55:cd:e2:07:76:1c:90:b6:18:26

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate munity.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for munity.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

munity.com

Other certificates including the domain name munity.com

(limited to 100 certificates)
www.munity.com
munity.com
munity.com
munity.com

Certificate

The complete raw certificate details for munity.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 358913256896500485319793716580141408664754
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-13 09:20:36 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-11 09:20:35 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'munity.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 655989518114045488899536109045266997182742410972902716920519896590843715010448740773320937444977841159893828972137175647072827477679936094090755288554584227559455038453013186523989710476925864386981543713739490857758297691893658390844387656853425985434248588381203366388105710903267161740249778627904469802043287095717455326865838179962989629495740925134633868530380468600984730666588276679057729822985883475732099388289640683948272208759880344157985466729291081968607161134033204401905792362497470073271961887032387057406068649271656516515980655597389179964528451567845735956249946768866363084788059349257500206387235432562625582062930060783468343531982659628378681827168697632055510557256379811299718958842172691465537172648491434171189469373560799361658716551497127897876435693810216759552839755857099710161987516987766592515052680138968102451455051213919430509722267920812295046018006062986634494658151302313590971559424024444080315639218367090838389140616462994525459139356466519887325612355962595050392577152517586204240042257316614666054585871394690472149281917427144012316237003517104316919266722058361104930226501922936241246306223384723403668629131379419251167378326821958955817890634435030313543853360550058522334519093383
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f7a89611e117bacb3a02df1bfcfe4492edc8fbab
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (14 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'munity.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018e375402cf0000040300473045022100c50818e0bb3570858a91209bca137e1555f4627b0c2bd9f7dd1dbfc8385a15df02201aefe5770035d05578d4fe539a4eebd82219772dfeaa5caf15b7eb21e71aa6530075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018e375402d30000040300463044022019b4f202194d1adbaa495201e31bae44a4f2bfc89162e1ed32edc811501b699a0220797c072b087553c080b19c688f13ad23d2ae65b1c09703377418e685304494b9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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