macwizard.org

Issued by R3

About this certificate

This digital certificate with serial number 03:55:1c:a3:d1:96:48:78:42:8a:36:6b:82:41:d4:db:35:b4 was issued on by Let's Encrypt.

With 12 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=macwizard.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:55:1c:a3:d1:96:48:78:42:8a:36:6b:82:41:d4:db:35:b4
Serial Number (int): 290298927962760688001973316975032371197364
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 35:0d:e3:99:37:d5:d9:80:4f:46:43:c5:2c:f7:4a:ad:fc:a7:e9:4b
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 67:7f:ac:ed:76:bc:fb:e8:6d:76:3a:21:ff:45:43:d1:a1:64:60:fc
Fingerprint (sha256): a5:61:f9:d5:03:fd:a5:34:a1:b7:60:c7:79:8d:00:86:7c:6e:19:68:93:b7:98:00:6a:19:01:cf:fc:6c:37:96

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate macwizard.org

12

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for macwizard.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

deathmatchstickers.com
englishivycontrol.com
genesisfive.com
kalispellmt.com
macwizard.org
milestoneinv.com
profithq.com
ratika.in
renewablenaturalgas.com
stewardingyourinfluence.com
surgicalmedicine.com
tyrochristianpreschool.net

Other certificates including the domain name macwizard.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for macwizard.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7EVgOZ9KRTVBgWfrR06s
nR/l8o6QDSr0aNlwgekkGi7sUkYnIuJ61M6kJ+PzK+lM2i3676gYnNDgEm0xbbva
YcozJ6d4LTOFyM3wnTV8BTtte4dl1Q7EwtY94gFqFXgjHC99b47CqJe+I3qxeksR
k6wwD+NKPtQHkoD0cHEvTB89PSCiiGg5xhkGYLLXkzVKfoBBjdOr+IE5fo9FM+wT
KwOJgNkKkgxHe3hdrX9y5QQhGvtt7skPDccVl7vnudaXsmJKVTJfWBUYQdbIa73e
woG7cAutcxC5Gyag4CcRYqNpoeQhI7ckpEAx2i+N2PlQcs4QmHV9A73vcwkPhSy1
OwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 290298927962760688001973316975032371197364
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-15 00:40:31 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-14 00:40:30 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'macwizard.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29826450493089327855826905143478804552391665761384768817203609179111346416648946229145647485648737374961069232683637303532836227032525917602137241097265288210374390276133539096565546946043349464908986406975640190417601889047443209424731892284017623436057484639913684992233421556470774008678082351860258012836567810969991203732542050675639774331778651294523084369505313860456132257604021738691945187325863690770901848434173053257253539456868120974025158176611769926707648430151054956497661196783832625371078367740429355897433657750510934576238730685575919121474355609401393929661153014246307440259678192337455338534203
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							350de39937d5d9804f4643c52cf74aadfca7e94b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deathmatchstickers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'englishivycontrol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'genesisfive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kalispellmt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'macwizard.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'milestoneinv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'profithq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ratika.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'renewablenaturalgas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stewardingyourinfluence.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'surgicalmedicine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tyrochristianpreschool.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018edf69b88900000403004730450221009a4f55857ed169960e325046b24d5073a05d974650e063ea9cd7f549a5211f7a02207694ed1e54f969ce4abe2fa56fb1491f3bac65342c73209721ba4db361a8cd8a00750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018edf69b8db00000403004630440220752f0e9a8321d210c535ceefbabb0413137ecce57ce26ef951a0bc1059a31c2a022009dfb364939aebe8c0868626ac6bdfaa2a17e9b9cb4aecb025b6fc68dead5ea1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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