bonniehalper.org
Issued by R3
About this certificate
This digital certificate with serial number 04:fa:8a:ae:b7:af:12:15:a7:48:c8:34:11:5f:52:73:55:42 was issued on by Let's Encrypt.
With 18 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=bonniehalper.org
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:fa:8a:ae:b7:af:12:15:a7:48:c8:34:11:5f:52:73:55:42Serial Number (int): 433704076105898788718656076715564880581954
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 9f:04:51:cc:73:8e:04:03:fd:d5:56:7c:b8:4f:25:36:a6:79:cc:bc
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 42:39:bb:8c:27:4e:09:6c:ab:91:7f:fd:aa:62:90:82:a5:7a:f6:11
Fingerprint (sha256): ad:38:0f:02:87:65:1b:59:54:86:a4:f3:e8:cd:6e:30:f1:00:92:57:89:46:5a:16:7e:6e:62:77:ff:af:5d:d3
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate bonniehalper.org
18
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for bonniehalper.org
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
anytimehomeschool.com
bonniehalper.org
clutterhotline.com
cretepay.com
diskret-shopping.info
forum.cmcsmen.net.dangersofobesity.com
hippieshroom.com
localbitcoina.com
magazinelimiters.com
mariocaldi.com
mataw.com.telladf.sex
movergo.com
naseer.com.southnorfolk.email
profound-strategy.com.myceliumonline.com
racistparty.com
shibariumbot.com
soaringsales.com
www.methanepyrolysis.com
bonniehalper.org
clutterhotline.com
cretepay.com
diskret-shopping.info
forum.cmcsmen.net.dangersofobesity.com
hippieshroom.com
localbitcoina.com
magazinelimiters.com
mariocaldi.com
mataw.com.telladf.sex
movergo.com
naseer.com.southnorfolk.email
profound-strategy.com.myceliumonline.com
racistparty.com
shibariumbot.com
soaringsales.com
www.methanepyrolysis.com
Other certificates including the domain name bonniehalper.org
(limited to 100 certificates)
Certificate
The complete raw certificate details for bonniehalper.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGcjCCBVqgAwIBAgISBPqKrrevEhWnSMg0EV9Sc1VCMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzA2MjIxMjQyMjVaFw0yMzA5MjAxMjQyMjRaMBsxGTAXBgNVBAMT EGJvbm5pZWhhbHBlci5vcmcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDSTqL/s8AHI4UiZc9LOZqbGnfgmp+XN+Piuf4gCsC7eExUFFKDERBL9+7KOjPP ioh6n5eDuj6lkEQhb/R0VWxA18AvZW+fG0m3hlXplcbxXstPjJGBEcKg5w2irBGJ JBpL529IOFgcSmIiRb3E94yBA9Tp9iNJZ1/qp5bkCWwImhkXlSSjH6SwYb8jqoil 742kJxjb9cyso6LLagDtwnuOFU6SuVgASE1/YHRQmm8RHS1zVET9h8uDHczvqV3N CbbQmjAj9WIenIHaFksCgnLqlTOm58Osvad0fwkIomSMphs6tLUkXnnL6ned3cxJ Y9dGuVX1QnHu0pIREzHrHuLfAgMBAAGjggOXMIIDkzAOBgNVHQ8BAf8EBAMCBaAw HQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYD VR0OBBYEFJ8EUcxzjgQD/dVWfLhPJTamecy8MB8GA1UdIwQYMBaAFBQusxe3WFbL rlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0cDov L3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5jci5v cmcvMIIBngYDVR0RBIIBlTCCAZGCFWFueXRpbWVob21lc2Nob29sLmNvbYIQYm9u bmllaGFscGVyLm9yZ4ISY2x1dHRlcmhvdGxpbmUuY29tggxjcmV0ZXBheS5jb22C FWRpc2tyZXQtc2hvcHBpbmcuaW5mb4ImZm9ydW0uY21jc21lbi5uZXQuZGFuZ2Vy c29mb2Jlc2l0eS5jb22CEGhpcHBpZXNocm9vbS5jb22CEWxvY2FsYml0Y29pbmEu Y29tghRtYWdhemluZWxpbWl0ZXJzLmNvbYIObWFyaW9jYWxkaS5jb22CFW1hdGF3 LmNvbS50ZWxsYWRmLnNleIILbW92ZXJnby5jb22CHW5hc2Vlci5jb20uc291dGhu b3Jmb2xrLmVtYWlsgihwcm9mb3VuZC1zdHJhdGVneS5jb20ubXljZWxpdW1vbmxp bmUuY29tgg9yYWNpc3RwYXJ0eS5jb22CEHNoaWJhcml1bWJvdC5jb22CEHNvYXJp bmdzYWxlcy5jb22CGHd3dy5tZXRoYW5lcHlyb2x5c2lzLmNvbTATBgNVHSAEDDAK MAgGBmeBDAECATCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB2ALc++yTfnE26dfI5 xbpY9Gxd/ELPep81xJ4dCYEl7bSZAAABiONXjdwAAAQDAEcwRQIhAMYvFscHwo1M kvhcMhBFbs++7vMqRKaItExqV4bpBOOUAiB02/ZzWLPSIiUb2cHqP1Mia6lrVSsI KZLjFvyAzb/CAgB2AHoyjFTYty22IOo44FIe6YQWcDIThU070ivBOlejUutSAAAB iONXjkgAAAQDAEcwRQIhAJ4M7ioNRC0ct+PCq/ktqQ03gqGhEip80RVJxqcRUm2q AiBrurYh/ucB5lk8R41x9GRtQ2hGIZSXJkfKZ4ID6yJCUTANBgkqhkiG9w0BAQsF AAOCAQEAsvgkfvtjdkd0EaKxTf1jVqzAJmY7mB17X99W5Jst3ZKd+lzpiIb6puf0 x1gG/0PfcbWpNxxBSukJZR6PYZTnlYKFMn2U3zndLmuwLWhMK/N4Ju/vXhz5Z6X3 OhtGAA1s7TPyarWKBTpJdjagowWRRTBRQAU1XjwMYiAMeDJJ10MbYYlV3o4Z9BCU IrUCR9mcpCKsYPYMZiUB3w2qJjnmbeFdTsVYOOlXom2qmeMsNJDEzdOdm42dlU7r pApIBsbICjgk0C+ixlWJLFX3QSDYftNv3pMx0paDzzvySDGdVfHgY0xbBAvJNR4s /iJ/yv6SZYE6a1+S+0LrtLa1pm4I8A== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0k6i/7PAByOFImXPSzma mxp34Jqflzfj4rn+IArAu3hMVBRSgxEQS/fuyjozz4qIep+Xg7o+pZBEIW/0dFVs QNfAL2VvnxtJt4ZV6ZXG8V7LT4yRgRHCoOcNoqwRiSQaS+dvSDhYHEpiIkW9xPeM gQPU6fYjSWdf6qeW5AlsCJoZF5Ukox+ksGG/I6qIpe+NpCcY2/XMrKOiy2oA7cJ7 jhVOkrlYAEhNf2B0UJpvER0tc1RE/YfLgx3M76ldzQm20JowI/ViHpyB2hZLAoJy 6pUzpufDrL2ndH8JCKJkjKYbOrS1JF55y+p3nd3MSWPXRrlV9UJx7tKSERMx6x7i 3wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 433704076105898788718656076715564880581954 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-22 12:42:25 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-20 12:42:24 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bonniehalper.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26548821251893243542774980927961800995209734838048472880946569112497695768826989897272795113694495570927209241682633730463292952735081370505567284308306016053526035057162989857147928291193776690634691342584709437919571508334221706537218967384248509558645096064069929940525257871279793985226214176488012322437168437094001213498026055820649737182079123422822574992192726121932608608538142163950559953215727795254606263858359604395804940890576007534989586927983842876265678903003121266059615016563318003801357266494160646532109939032807236457858811381139447403078695661073841709616659214466824713258834154346880645915359 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 9f0451cc738e0403fdd5567cb84f2536a679ccbc . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (405 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anytimehomeschool.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bonniehalper.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clutterhotline.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cretepay.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diskret-shopping.info' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forum.cmcsmen.net.dangersofobesity.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hippieshroom.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'localbitcoina.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazinelimiters.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mariocaldi.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mataw.com.telladf.sex' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'movergo.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naseer.com.southnorfolk.email' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'profound-strategy.com.myceliumonline.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'racistparty.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shibariumbot.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soaringsales.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.methanepyrolysis.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000188e3578ddc0000040300473045022100c62f16c707c28d4c92f85c3210456ecfbeeef32a44a688b44c6a5786e904e394022074dbf67358b3d222251bd9c1ea3f53226ba96b552b082992e316fc80cdbfc2020076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000188e3578e4800000403004730450221009e0cee2a0d442d1cb7e3c2abf92da90d3782a1a1122a7cd11549c6a711526daa02206bbab621fee701e6593c478d71f4646d4368462194972647ca678203eb224251 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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