bombersfastpitch.org

Issued by R3

About this certificate

This digital certificate with serial number 03:a5:70:80:e1:d2:a1:fd:da:47:97:f2:cb:d9:ed:d0:0c:3f was issued on by Let's Encrypt.

With 13 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=bombersfastpitch.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a5:70:80:e1:d2:a1:fd:da:47:97:f2:cb:d9:ed:d0:0c:3f
Serial Number (int): 317632991066991598372261703500739923414079
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b9:a6:8c:df:8f:88:75:d3:f9:88:07:3d:6a:9d:10:18:a9:a5:a2:0b
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 82:e1:58:da:08:6d:53:cc:d2:db:47:70:9d:b6:6f:6c:95:39:b1:20
Fingerprint (sha256): ac:fc:6b:46:6e:ac:d7:dd:74:ff:53:b0:94:71:4b:12:aa:96:74:51:1c:26:ac:4d:0f:20:93:ac:17:d9:68:f4

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate bombersfastpitch.org

13

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bombersfastpitch.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bombersfastpitch.org
davidandstacywhited.com
goodnessdharma.net
growingdeeper.us
matinicusisle.com.wagediscrimination.com
religiondiscrimination.com
seomadesimple.com
stoneoakfamilydoctors.com
tasalive.statenationals.us.homeschoolactfl.com
thehillside.com
tort-law.com.trappertalk.net
tunica.net.r-f.in
writeanalytics.co

Other certificates including the domain name bombersfastpitch.org

(limited to 100 certificates)
bombersfastpitch.org
bombersfastpitch.org
bombersfastpitch.org
musictrivia.ca
xb1.co.za
silverio.thebo.ng
bombersfastpitch.org
bombersfastpitch.org
bombersfastpitch.org
reverse33.org
bombersfastpitch.org
bombersfastpitch.org

Certificate

The complete raw certificate details for bombersfastpitch.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxnKD0x3ru1HAQS1LlYwl
9aPeurwlsIu05KvHdYcs6qDQc4XfenmlWPkJj5AfXJ4O6A2otPWt1RTNbYBax7Z3
xoVCWhYPdgkAioIv5vKdFl6+0T9SD1axDnd0Bmfefm3X791V4p0sBaJKBAI5tv43
GJYGEMTDJHkwjPGyPFv4cg78iMJK3e0PSJo0+pnDm1Naw/iraLJr4nCct/Y+IsDF
gFUA3LK5+bk6f1G/gmCd3prP9bId4TCBendOHVe++iZ8p3WnZjOzzqkTFhg8a2+3
F8lLQm5xPRnMiv/0ekwJLs2ig9vt1PHT15p1y753prvgX3k9gyHDzjwUeYnBQvNQ
aQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 317632991066991598372261703500739923414079
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-09 05:02:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-08 05:02:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bombersfastpitch.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25051653804905778066530379357247337825618405408712552857971457290244100124965138871705071461896108723872266595182155007124134008791121559129585252011468504943506066246105659767981131940121827373537474919312704322934726381191522622590700037883360257229380765624284431439328182882554909683976701840028060450913100839041692166608129883852426099249942746958794154644346252183159922014580468571116968245705212440119607709404537168530224164457157398062014192667204393789778875367736078331773227270161415370851898362301869978720087477847302552026435562919821554163226140347723137104406545370849195551394939278807583612424297
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b9a68cdf8f8875d3f988073d6a9d1018a9a5a20b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (338 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bombersfastpitch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'davidandstacywhited.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goodnessdharma.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'growingdeeper.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'matinicusisle.com.wagediscrimination.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'religiondiscrimination.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seomadesimple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stoneoakfamilydoctors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tasalive.statenationals.us.homeschoolactfl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thehillside.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tort-law.com.trappertalk.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tunica.net.r-f.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'writeanalytics.co'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018cecd074be000004030046304402206954a3ba4c8b58fa7be145b8629f831c961fd1ee0598b59cb14cc88336a918ed0220423321638271118711fbd29ccbf87b7a4d18b3996b76608108d98e9e786c824b0077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018cecd074c70000040300483046022100add2f7529c35bd7c474814e9b05923df399768f705dbe3b84501b7f3414cde3b022100d7a6feac80302b6739c0a4dfceb1ed2f678f452762e15d8166d13627db02ca9e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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