legalisehomeschooling.org

Issued by R3

About this certificate

This digital certificate with serial number 03:d4:e0:80:2a:1f:35:e7:dc:f3:67:62:90:85:a0:3c:71:21 was issued on by Let's Encrypt.

With 13 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=legalisehomeschooling.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d4:e0:80:2a:1f:35:e7:dc:f3:67:62:90:85:a0:3c:71:21
Serial Number (int): 333775132121907367209681869224202557223201
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: f0:83:57:bd:d6:0b:bb:30:ad:b0:5b:47:d4:eb:f4:a3:83:5d:99:98
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 1a:c5:6a:c4:29:d4:57:8f:d1:2e:9c:07:bc:6e:8c:cb:56:29:20:70
Fingerprint (sha256): a5:96:5b:a8:7f:0b:d2:a8:97:f0:3b:e0:5f:3c:64:4d:3f:7a:2b:db:b1:60:8f:1f:7a:ae:05:b2:b0:75:21:56

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate legalisehomeschooling.org

13

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for legalisehomeschooling.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

americanguncoalition.org
astrologyhoody.com.thehousepainters.net
biteue.com
hisnamewasstryker.com
homeandcommercialcontractor.com
istorefrontbuilder.com.montep.com
legalisehomeschooling.org
separationordeath.com
shifuyanlei.com
skylarchomestay.com
syruprx.com
tampa-women-leaders.com.quelbe.com.123fhaloans.com
wildthinghemp.com

Other certificates including the domain name legalisehomeschooling.org

(limited to 100 certificates)
firefanged.com.legalisehomeschooling.org
summitparkbible.org
legalisehomeschooling.org
legalisehomeschooling.org
legalisehomeschooling.org
legalisehomeschooling.org
legalisehomeschooling.org
legalisehomeschooling.org
legalisehomeschooling.org
jablessjobs.ca

Certificate

The complete raw certificate details for legalisehomeschooling.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5nn3Jq21qY3nIgONGvvj
zEWvg99ccVhko11uuGyBgLSIM2JfS4lt8qEzJ2b+/Ey1H9HBwL+o7B3V857mKzg4
WCGVCwHh4d2m+Ws1ht+j7O7IipiKO5c3bMvymm+BSO9V2ThYdwvdu+pXD1ztbW6R
LrGxI+okRhDBguGBJ5OrLnAozfCtOT22sT00t4nG7tydtZ8zCcoUHjKFr0/0Xclj
iPlzREFKzDsnbtORWBBo8LmtKHufu1/9hDLTE9+EZHuecqgD342MqukRfpqewru4
8ddyt1/fbDLkQXiIZhLrr5ENP1eJOa4D9ce1SkpmqpNqYDC76XtN3ID+yUIPzVS4
iQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 333775132121907367209681869224202557223201
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-22 16:30:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-21 16:30:53 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'legalisehomeschooling.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29094953539243359437054962271570120997397104153767798548273040596924287399248168221760755202295228559817002830095438356694738063754561699118536133294074302991225231017852694249068420682688030017687833779309027937100996868729094946926415217753989568611552432252245476179980924857427096403371714735960824478037803952749301237435891665036524974689559563305856011375969716288057399839187930106633831948311701616175121733473603428587052565745346894091833809760996846838936026440034563219375067195286262392508488954231318111419147883130110830740425329406386875387612316198121651432819096634730457939299294336357152637368457
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f08357bdd60bbb30adb05b47d4ebf4a3835d9998
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (346 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'americanguncoalition.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'astrologyhoody.com.thehousepainters.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biteue.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hisnamewasstryker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homeandcommercialcontractor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'istorefrontbuilder.com.montep.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legalisehomeschooling.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'separationordeath.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shifuyanlei.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skylarchomestay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'syruprx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tampa-women-leaders.com.quelbe.com.123fhaloans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wildthinghemp.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018c92947d2e0000040300473045022100e331c9907445a3b2b802ba4108975975489fdf7defdb7362e7f0bc0eaee0ae0a022072279e12a2dfbc0f435d0f2582ed2c367b5768d9f31eda9bb0842f9ab8f69af6007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018c92947d26000004030046304402203978f56a79bdce371593e6c852c42fa7262c8f9d35f262b6d348c1aa955fa51502204ab749bc0a6e38e3253a1edc08556b58fe8a060992adccbea68144c55827e2cb
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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