*.paprescribedfire.org

Issued by R3

About this certificate

This digital certificate with serial number 03:94:0d:88:85:f5:9e:7a:f7:96:5c:c4:7b:c2:36:8c:ab:68 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=*.paprescribedfire.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:94:0d:88:85:f5:9e:7a:f7:96:5c:c4:7b:c2:36:8c:ab:68
Serial Number (int): 311716636932918021566723282131484412783464
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 1e:83:ef:42:7a:76:ee:11:bd:91:61:c1:91:10:5d:b8:d8:53:75:99
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 63:0d:f2:5b:1c:84:fc:27:e6:7a:8e:da:6a:1f:25:43:5c:10:da:32
Fingerprint (sha256): ae:26:ce:ac:e0:79:cf:5b:e3:18:10:5d:97:87:fc:f2:00:54:76:ed:6d:dd:cc:36:0b:3c:34:1a:c4:76:0c:a1

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate *.paprescribedfire.org

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.paprescribedfire.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.paprescribedfire.org
paprescribedfire.org

Other certificates including the domain name paprescribedfire.org

(limited to 100 certificates)
paprescribedfire.org
paprescribedfire.org
paprescribedfire.org
*.paprescribedfire.org
*.paprescribedfire.org
paprescribedfire.org
paprescribedfire.org
paprescribedfire.org
paprescribedfire.org
paprescribedfire.org
paprescribedfire.org
paprescribedfire.org
paprescribedfire.org
paprescribedfire.org
paprescribedfire.org
paprescribedfire.org
paprescribedfire.org
paprescribedfire.org
paprescribedfire.org
paprescribedfire.org
paprescribedfire.org
paprescribedfire.org
paprescribedfire.org
*.paprescribedfire.org
paprescribedfire.org
paprescribedfire.org
paprescribedfire.org
*.paprescribedfire.org
paprescribedfire.org
paprescribedfire.org
paprescribedfire.org
paprescribedfire.org

Certificate

The complete raw certificate details for *.paprescribedfire.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ledX/vEqpMaDiB+ngvp
jbzIf9OsqqteGMHuiYVmRWhfm/DUKrnzeovc22KtuhMLfVVaB5Ptk/erYuRpQlGI
vLAsuKOFjKHypWYqq/il8uwfmR9KXKvw/Uejc2o6Hw5E+Ro83JGEMyxlrfS/SYW8
A7KHklqYG4eeqqprRSdw5NwBbIzcvcqEA4qJWLuZUZfiEKoVUl8Mpr99sdWEt1t6
Sz690Ay24vHevEBNcEQWfnduAp5DWtb8oQA8QS75Yf2Htg41BVmiIz+KSkO1D18R
mj8eGPkrIUZ5XGWAN7eBqQ8Oi8+qcA9PAYUtxGrM4QuMXmwsDmV89oAJonGZml83
3wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 311716636932918021566723282131484412783464
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-21 14:01:37 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-20 14:01:36 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.paprescribedfire.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26553248484298346239066382790911177077176841336162216248065809093514861461791953643263444463288778609558406967283174712912462065629887807821793887287513791567860716855910349132798022462614108556188439572102703353569096014800483189263789798564592880146624276965898581803557975778090353018425745321767553156212454752961822894054392711799863709265701205979284188231321220908343278022015521851017948668577158276302757468072226171258684183961295673402195418450207910862870141717711533225303004716980867437632739839903422525201512753138021633518012047900006863768349770858458943266232992676305898087114172873680607630014431
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1e83ef427a76ee11bd9161c191105db8d8537599
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.paprescribedfire.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paprescribedfire.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d2c8a9a9b0000040300473045022100f4020a697892fc4355158c58f9f8a17416b8042b74363e9abd5a4e5402bd94270220404a220f1e17b265ffd1938065622413900a380275dba687280d503fdb4a30db007700a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018d2c8a9a820000040300483046022100827e9921ac8e42b44903ca3de9f8607ac92476bb71104eb3153b446125d8e4c5022100eb6174107ec97ba4dc64c2fe03cfb2e8de6357d7ccf05a437a0e7de41dc15c66
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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