DV SSL/TLS Certificate for www.artsfund.org

Certificate is witin its validity period

Issued by Let's Encrypt (R10)

About the www.artsfund.org DV SSL/TLS Certificate

This certificate with serial number 05:98:f6:7c:65:31:55:95:79:15:5c:fc:02:61:55:66:f4:f7 for www.artsfund.org was issued on by Let's Encrypt.

With 5 subject alternative names, this certificate can be used to secure multiple FQDNs. This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for www.artsfund.org provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Let's Encrypt

Organization: Let's Encrypt
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 05:98:f6:7c:65:31:55:95:79:15:5c:fc:02:61:55:66:f4:f7
Serial Number (int): 487611985414989464162512740717748197717239
Serial Number Length: 139 bits, 18 octets

Subject Key Identifier: 86:37:c8:5e:1b:6d:73:cd:f8:f5:60:3d:9e:09:31:9c:ca:d3:1c:13
Authority Key Identifier: bb:bc:c3:47:a5:e4:bc:a9:c6:c3:a4:72:0c:10:8d:a2:35:e1:c8:e8

Fingerprint (SHA-1): b6:25:e8:6c:b0:ee:cf:11:4c:a6:f5:dd:fa:99:04:ad:51:89:54:15
Fingerprint (SHA-256): ac:b2:26:e7:6e:36:5e:18:dc:79:14:db:05:1f:90:3d:4c:b2:03:e9:84:61:75:cd:78:d2:6b:52:6b:68:bd:a5

Issuing Certificate URL: http://r10.i.lencr.org/

Revocation Information

CRL Distribution Point: http://r10.c.lencr.org/120.crl

Check the revocation status for certificate www.artsfund.org
5
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for www.artsfund.org

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

X.509 Certificate

The complete raw X.509 certificate details for www.artsfund.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlTlvg/TAdpPUdWu2EEy
qbxxp583bb9dFOTVFLynWGAf8AFZt/OG1y1iO8pL0qRYTAhuScPg5P33uK8ECpnL
6sbZjrTZVE+OKH5y9IQjOuIwxhTMfIaSN5G2EYtg0JlcQmkpe2HnUYYX5atOgUgk
Z2WQzyizaUgmvrdj5wGYV7Gfr13nzcXl0DARg4puVBclDJnQKWVorxTgZZ9P4v8l
pNVhjiQmBdTmYiOgTZus1HPPftofjn8J9n+6jetgMcUT5avExe88ByM65MSd69Bv
w0XYT+Fgs7PrPSCAONSQp9asCUxqTYdhq1kTKDE2eBoMsM3ir3ygo2EG1Fz9fhg0
mQIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 487611985414989464162512740717748197717239
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R10'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-25 19:49:38 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-08-23 19:49:37 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.artsfund.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23017235987538499859619432376324611361302332394858907716190098192850153142768802401843498936472393685561463489898999929803813108589761026596048870943146773325133455822843053286938850882095282235546838392246581302743845406069638922192861575141004063191831252276171220777857737547974156334933863099749665883918052080407795320294917893301476374217139181801544471018501534201121468930121223090576062667910903882300548524533473367913608626905640544225477800396174683335760693336060637767931761818504604529341725448003145581615297826571626235097001766872039333735343745763115888602933162820703228969610041992797532135634073
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8637c85e1b6d73cdf8f5603d9e09319ccad31c13
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName bbbcc347a5e4bca9c6c3a4720c108da235e1c8e8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'artsfund.artsfund.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'artsfund.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.artsfund.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.artsfund.artsfund.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.artsfund.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.c.lencr.org/120.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee0075000de1f2302bd30dc140621209ea552efc47747cb1d7e930ef0e421eb47e4eaa34000001970933f3210000040300463044022050c04549559f4aabf20745eefd90c0f36bc2c277d5566e69f41ce31956dbc913022041e43e4ca0d2463d0d88af23f2956f1a4ff7e1137058813d0186c4a619c0cd8d00750012f14e34bd53724c840619c38f3f7a13f8e7b56287889c6d300584ebe586263a000001970933f32a000004030046304402207a5088751468db2ff6cd788e76c450a7b81636de1a2187f49ca0365699aee4f7022064834f4e95820687146f127d2112f95135bf9adf1ddaefe8876d6285b1289a22
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00cc06c507157f100908a686553006b9c9f136f77958c5a822032358c382c14f2339b1a76fb99dcdd82dab89210a12f885a0b5db93fd839aeea907143a368c9319d110a353bfc71843d78af6b3616367d16d25815346fa131a24f71d2b8b08e5bd8874ebbb0176fb54377bd641066894df1c73802833bd1a8aa6218ec51fceb5bc842faec9546e02ef552b12aff028d5163abed48746c78d9870ab3e80c8915bb7b3d4f2e27b770f5f30df80ccb4a1a0c8196573e4caf291922bf39efa524a87f466d5f74e0787883cfc61f9170c4598e50e170292cfc72cb5eae39f04a0ee0c2ba17ee1fbd697c0683034afbcc76ee3738082f07438ce4ce93e912ae030101656