hewespublishing.com.aburrido.com.crossroads4u.org

Issued by R3

About this certificate

This digital certificate with serial number 04:c3:ac:47:63:97:87:1a:fb:02:bf:52:60:1e:d8:48:4b:d2 was issued on by Let's Encrypt.

With 9 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=hewespublishing.com.aburrido.com.crossroads4u.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:c3:ac:47:63:97:87:1a:fb:02:bf:52:60:1e:d8:48:4b:d2
Serial Number (int): 415033203164939764859685872326495741430738
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 13:3e:3b:59:5b:e9:8c:a2:31:fa:19:8f:6a:cb:ed:59:94:95:2c:d1
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 02:93:67:3c:7f:ed:f6:8e:2e:d3:c9:95:07:1a:aa:ca:d6:33:20:ea
Fingerprint (sha256): a6:4e:f6:3c:11:f6:8b:cd:55:fd:b8:37:52:01:27:c6:8d:5f:51:57:33:ab:93:35:14:f0:35:a3:31:2b:f1:05

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate hewespublishing.com.aburrido.com.crossroads4u.org

9

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for hewespublishing.com.aburrido.com.crossroads4u.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aspectium.info.r7.at.epicshopper.com
hewespublishing.com.aburrido.com.crossroads4u.org
hookercounty.com
landbountifulministry.org
miamibeachrealestatecompany.com
petcitis.net
proistores.com
thebannerofgrace.com
wittemberg.com

Other certificates including the domain name crossroads4u.org

(limited to 100 certificates)
balmorallaw.ca
homeschoolingorphans.org
vertera.ca
newjerseyassembly.net.crossroads4u.org
dominiospremium.ca
anselmacademics.org
leeds.life
vertera.ca
crossroads4u.org
liquidproductionsllc.org
balmorallaw.ca
balmorallaw.ca
louisianadwi.org
callouts.epik.support.crossroads4u.org
balmorallaw.ca
dailystormer.world
radiator.cc
advocates.club
crossroads4u.org
shepper.ae
diamantes.ca
vertera.ca
vertera.ca
doglawbyzipcode.org
dominiospremium.ca
illinoisfpc.org
vertera.ca
healthmanagement.ae
axiompraesidium.org
diamantes.ca
diamantes.ca
diamantes.ca
hewespublishing.com.aburrido.com.crossroads4u.org
balmorallaw.ca
liquidproductionsllc.org
shepper.ae
diamantes.ca
scratch.me
crossroads4u.org
shepper.ae
crossroads4u.org
zatv.co.za
xnft.llc
rollups.vc
dailystormer.world
shepper.ae
diamantes.ca
advocates.club

Certificate

The complete raw certificate details for hewespublishing.com.aburrido.com.crossroads4u.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2tbQzJ+vTrb7QFsW4nrx
1atK1qhGra/XNrNcc+3NTxwP9LIaAiqCVCajIxJTEzxTlOkLL5YlC6O2R/GesKNl
P1z9xWL9oEq8MDUUF9ezpbJopyb+PFsiOFMVd9RFHpIfT/zaDBmWGEtjZOrab68z
8kuUxO9pZdQS1fd8BX2QXPdKqubwhFVC8DtKXKYvfwuJcSlQoIpDXjb+6AlPH5+k
R8yFasfuK/UEFy9U40NeAvLJfsQaGICmKPo916T/2rfHnd7Iirckgzc1COjXdNzX
DJmeJ2WbvN/doRbGoSP7H9F0YlRYOh8xXRfvzpB6vzhlCERt0twQ53q3TbzAwtkf
fwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 415033203164939764859685872326495741430738
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-17 19:42:53 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-16 19:42:52 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'hewespublishing.com.aburrido.com.crossroads4u.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27625880014009998868047068531523984186770011853447577796989134659375539040649375096381363927496390079761751340207688707917941076187625213927085624667155752963465093408776473661901244479969799820215452535682267234853041296325088422472462300291393378499218520951146860266130214756593471424610457503013765270153599768293904416311682833523046223612620400164322624753866645348805959592447109975222918177031041253307541404772566713633230601419249540467504653209554476585796865115712845499063152467604959339298149063977226196742698220896199875735552137363383229082326179415453309493610570802994406567473767348337918963425151
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							133e3b595be98ca231fa198f6acbed5994952cd1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (238 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aspectium.info.r7.at.epicshopper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hewespublishing.com.aburrido.com.crossroads4u.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hookercounty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'landbountifulministry.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'miamibeachrealestatecompany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'petcitis.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'proistores.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thebannerofgrace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wittemberg.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018c7984763c0000040300473045022022d61698908440f47f972c10d5900b0a5b179a3295c988d8c8aa18a691a23ec8022100dc1ad44d0606769c10329ac5cff5e5cad00e9f037c191725c105718c3239655b007500a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018c798476510000040300463044022076723c6585c86d30285abe88ee8e2ca953a19ec041a88bcb308c9bc288840b7c02203e6e109f98c68ff9d3344195e1cda30c6770fc75ac34c66144dd00cfb0d92011
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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