git.maidagency.org
Issued by R3
About this certificate
This digital certificate with serial number 03:e8:20:57:2c:b2:79:95:cc:de:79:42:d6:61:59:be:d7:b7 was issued on by Let's Encrypt.
With 15 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=git.maidagency.org
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:e8:20:57:2c:b2:79:95:cc:de:79:42:d6:61:59:be:d7:b7Serial Number (int): 340325354853196537573125944960982236190647
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 57:6d:54:c4:be:3d:34:a4:23:9e:34:66:87:72:0b:e1:c2:90:30:9d
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 98:32:23:4d:42:f1:21:1d:27:50:b3:94:0a:ae:b0:18:9b:11:fb:f3
Fingerprint (sha256): a6:66:e3:32:35:14:84:a9:7d:a3:8e:73:b7:fd:1a:b4:df:fe:5e:a4:e7:e4:22:50:2f:7b:64:71:c2:87:02:ad
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate git.maidagency.org
15
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for git.maidagency.org
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
austinmortgageloan.com
careeradvisor.in
conwaysprings.com
e-mailbox.com
energovia.com.olaya.co
git.maidagency.org
happyface.co
hemphi.com
landbaronbob.com
macintyrecorp.com
mechanical-integrity.co.uk
natyur.com
sipcom.net.umiglobal.net.hb2b.xyz
softhemp.com.cityofhelen.com
tieronedynamics.com
careeradvisor.in
conwaysprings.com
e-mailbox.com
energovia.com.olaya.co
git.maidagency.org
happyface.co
hemphi.com
landbaronbob.com
macintyrecorp.com
mechanical-integrity.co.uk
natyur.com
sipcom.net.umiglobal.net.hb2b.xyz
softhemp.com.cityofhelen.com
tieronedynamics.com
Other certificates including the domain name maidagency.org
(limited to 100 certificates)
Certificate
The complete raw certificate details for git.maidagency.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGGTCCBQGgAwIBAgISA+ggVyyyeZXM3nlC1mFZvte3MA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzEyMjUwMTE2NDlaFw0yNDAzMjQwMTE2NDhaMB0xGzAZBgNVBAMT EmdpdC5tYWlkYWdlbmN5Lm9yZzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMGkIOeQNcvsRQhozcT6VmjAs2hKgmj3DdY5hqeMdVb9YXdetqQ4Nobo1ah2 5CyCTApfxjLqobBIVqhyqaLus14w2ciRcSU2rlVWCc1a9RmUM4T6GOQT/b7ELx7M Zp5SK9/ATuKmEFGhyy7PmPnKQdzaZ8QSJnSnQM4GlWsQwzqlHoeoatlIWdQsRi4X N3XRax0fUVefYf8WEgv+Udd//RGQ5P6bZvJ+4ykD2Ffbw7VTFe87HyjNUUL/oGZJ BFG9NGbHMPmTYXFTwrIm+6aMR7OMUDrdWzqfIPzeFWixMU18j9k9XFPdFd+y4hQr M3jYVj1H7AnWIGysodzHPYGTdsUCAwEAAaOCAzwwggM4MA4GA1UdDwEB/wQEAwIF oDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAd BgNVHQ4EFgQUV21UxL49NKQjnjRmh3IL4cKQMJ0wHwYDVR0jBBgwFoAUFC6zF7dY VsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRw Oi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNy Lm9yZy8wggFCBgNVHREEggE5MIIBNYIWYXVzdGlubW9ydGdhZ2Vsb2FuLmNvbYIQ Y2FyZWVyYWR2aXNvci5pboIRY29ud2F5c3ByaW5ncy5jb22CDWUtbWFpbGJveC5j b22CFmVuZXJnb3ZpYS5jb20ub2xheWEuY2+CEmdpdC5tYWlkYWdlbmN5Lm9yZ4IM aGFwcHlmYWNlLmNvggpoZW1waGkuY29tghBsYW5kYmFyb25ib2IuY29tghFtYWNp bnR5cmVjb3JwLmNvbYIabWVjaGFuaWNhbC1pbnRlZ3JpdHkuY28udWuCCm5hdHl1 ci5jb22CIXNpcGNvbS5uZXQudW1pZ2xvYmFsLm5ldC5oYjJiLnh5eoIcc29mdGhl bXAuY29tLmNpdHlvZmhlbGVuLmNvbYITdGllcm9uZWR5bmFtaWNzLmNvbTATBgNV HSAEDDAKMAgGBmeBDAECATCCAQUGCisGAQQB1nkCBAIEgfYEgfMA8QB3AEiw42va pkc0D+VqAvqdMOscUgHLVt0sgdm7v6s52IRzAAABjJ7CtB8AAAQDAEgwRgIhAOqk 1/PFGgWK4aHW6bJL6RGK7W5v9++4VMhZTne9m78vAiEArSjSdAYeKrcPdVk4uMP0 O+oUIcKuvoEJ79YPtc3Q1HcAdgAp0DobtnSqcRzTA1tlV8FPiqeLT+g4lEnspFP5 RL0kaAAAAYyewrWFAAAEAwBHMEUCIC7nTdibFIh2gAB/t8/uMsZFAAaYneQtS8QQ uMhO0NT7AiEAukDCBQQsdtt6aaNT871ZYWqSJgQZ4b8a1grdfHJ9KkAwDQYJKoZI hvcNAQELBQADggEBAC9kV0ZVQNzcVkps+K9/dzEnk8bHgKlpOZvyONbNNe4en/EX 4omvcmmG50L09r4kcpJBaQ/4ccChRrPioYZYHaErAr2Jw5FOI0Kmsu2qs8g954HD oqTRvSCAh4a5jdWE3FUO9dWJ6OsD/BfZVfhQ2YbcSWGU4hR788sQ2w1uN8Hopl5Z sWWuy7YsF3JGYwdBCobdUNLZnRos60Jl1TqjEsW4S3IhspbXGV+NOJmQDR8HLeCj T5t/9yFd6qIdr/Z1l9LyoiEPFKJZ8xSOc3EB7FOh3rVGkXNpWqbj3XAa8x09HRVR xerv4kiZt3GEhaZMfQdIDqOnQ0gODuyqze818xs= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwaQg55A1y+xFCGjNxPpW aMCzaEqCaPcN1jmGp4x1Vv1hd162pDg2hujVqHbkLIJMCl/GMuqhsEhWqHKpou6z XjDZyJFxJTauVVYJzVr1GZQzhPoY5BP9vsQvHsxmnlIr38BO4qYQUaHLLs+Y+cpB 3NpnxBImdKdAzgaVaxDDOqUeh6hq2UhZ1CxGLhc3ddFrHR9RV59h/xYSC/5R13/9 EZDk/ptm8n7jKQPYV9vDtVMV7zsfKM1RQv+gZkkEUb00Zscw+ZNhcVPCsib7poxH s4xQOt1bOp8g/N4VaLExTXyP2T1cU90V37LiFCszeNhWPUfsCdYgbKyh3Mc9gZN2 xQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 340325354853196537573125944960982236190647 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-25 01:16:49 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-24 01:16:48 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'git.maidagency.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24444927654738121626750808176633568630657650897903181301622955365872314334444537822563773072060604381068849706897239834917158483472363340722424024223747866606785766021592599505902124786013357314036031259021939462393828475597559087458826250541113114290240853194459480195579514173818753632907708655353021752849195721024014713420968200144735400064834508990896880190290631326549341770854354255834775551363941449623933981147963085117372612687759116702754511200627400691038588375922952007184835521868218002914670101394835876377317553516834937999818801000981735253068591395110760777727931409837958854288679867711424843445957 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 576d54c4be3d34a4239e346687720be1c290309d . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (313 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'austinmortgageloan.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'careeradvisor.in' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conwaysprings.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e-mailbox.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'energovia.com.olaya.co' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'git.maidagency.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'happyface.co' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hemphi.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'landbaronbob.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'macintyrecorp.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mechanical-integrity.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'natyur.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipcom.net.umiglobal.net.hb2b.xyz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'softhemp.com.cityofhelen.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tieronedynamics.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f100770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c9ec2b41f0000040300483046022100eaa4d7f3c51a058ae1a1d6e9b24be9118aed6e6ff7efb854c8594e77bd9bbf2f022100ad28d274061e2ab70f755938b8c3f43bea1421c2aebe8109efd60fb5cdd0d47700760029d03a1bb674aa711cd3035b6557c14f8aa78b4fe8389449eca453f944bd24680000018c9ec2b585000004030047304502202ee74dd89b14887680007fb7cfee32c6450006989de42d4bc410b8c84ed0d4fb022100ba40c205042c76db7a69a353f3bd59616a92260419e1bf1ad60add7c727d2a40 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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