axiompraesidium.org

Issued by R3

About this certificate

This digital certificate with serial number 03:3f:87:c6:3f:64:9b:c1:ab:b4:32:1f:6b:47:d4:36:d4:4c was issued on by Let's Encrypt.

With 16 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=axiompraesidium.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:3f:87:c6:3f:64:9b:c1:ab:b4:32:1f:6b:47:d4:36:d4:4c
Serial Number (int): 282955122051271642268312620571684173698124
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: c2:5b:ab:5f:14:33:a2:a1:3d:14:51:78:6a:12:ad:c0:bd:cd:fc:fc
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 40:ed:41:8d:2b:1b:67:4a:ec:b8:5f:d7:4a:69:7c:a6:70:2e:9a:f9
Fingerprint (sha256): ad:11:d4:10:ae:5f:ac:aa:93:45:6d:93:43:e5:9c:59:d3:48:cf:55:51:b3:3d:f8:b2:3c:8b:09:c6:e5:af:8f

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate axiompraesidium.org

16

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for axiompraesidium.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

axiompraesidium.org
bestcollegesusa.net
bitchute.ambaalamps.com
childcustodybyzipcode.com
dyverg.net
eliterep2025.com
investor4vip.com
kuwaitforvip.com
offshorenow.com
ofnames.com
premier.travel
rastmoney.com
sanantoniohomespace.com
teammcantosh.com
usedrackcases.com
x-o.in

Other certificates including the domain name axiompraesidium.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for axiompraesidium.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA72rV1CBeYbNq68k48sXo
zNi83UJ4veToGJ/sZyRaMy1PXaEo2tIIvcmLKpdwehsOmrrX+g3288UfpjBKEZvx
uspjz14Zul2Wua0l0EZWO6Dk+BhFhFPfAoXaLu3aZLKX3DfvRrY25jwMg1yCq1Qw
n8iHmy0sWuZjxwPbOCJBLQV1cMMZP/Ay/p5WR5jYkzF5DpCkoTO0G7c2NA55O/ZT
uHNqrGGu98PW1t4y/Xl4kWe/fRDg5I5cAfuIvXXRrtMl1i7ZIYrklIJDBP9BPlIT
t5OtMGqGTh7IHjkYKJlEdVJ9hm1/ldg+InRuzuSgn3kc2ax+eVciMJ6UCs9FDrR2
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 282955122051271642268312620571684173698124
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-18 17:01:49 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-18 17:01:48 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'axiompraesidium.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30223637321061030113914570537398849724338539540129663408373640908206688023320038663342252628173181350682167876666349313877680593618919095259436326026035560212483238334351164413775285496674238861842212310297727410563379398326096305782246498085208311209004488329121861368428073270291529090197201869502827135361112021303323286668478185381632790476924320508458168629690675607019290001856817853349598420127335489536010473472460695704826261682225206414226835695725428588029480660874677411992303813899483834777292558571074054124980674471999107710264932514369862090508694008476542374808574025320809759190871798994758129710677
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c25bab5f1433a2a13d1451786a12adc0bdcdfcfc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (295 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'axiompraesidium.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestcollegesusa.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bitchute.ambaalamps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'childcustodybyzipcode.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dyverg.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eliterep2025.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor4vip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kuwaitforvip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offshorenow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ofnames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'premier.travel'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rastmoney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanantoniohomespace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teammcantosh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usedrackcases.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'x-o.in'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018dbd61a4cd0000040300473045022100df36b396c6ae53b168c29223a7ab323e06cc22cc8cf488e8e2f1a5c7ef4b88c402201c35ccd59757d72c5eba60e31f05c4c5f03c798428479ef2e2fbd884a5e0956d0076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018dbd61a6c30000040300473045022100c0e0153d07819abb73238f36d49d31b04a6be91d0fa947d6673d75625450681b022003b50ac8353b9b79916e0214f161f04a5fd4fba893638c416af637fe4ee70d88
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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