results.trojantiming.com

Issued by R3

About this certificate

This digital certificate with serial number 04:0e:d6:8b:4a:5d:53:dc:12:b9:99:49:a1:09:87:29:ab:6e was issued on by Let's Encrypt.

With 20 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=results.trojantiming.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:0e:d6:8b:4a:5d:53:dc:12:b9:99:49:a1:09:87:29:ab:6e
Serial Number (int): 353498274892587916504796594473397211736942
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 90:1c:91:a9:32:b5:01:e8:c6:f4:03:8c:fe:2b:f9:17:8f:0f:2d:e9
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): fc:c8:d7:c1:8c:80:a7:e1:19:9d:3b:a2:33:6a:47:2c:4e:25:37:d4
Fingerprint (sha256): b2:ea:50:af:d8:fa:20:5f:50:3e:d7:33:9a:2a:4d:97:9b:c4:1f:a6:7e:0c:49:17:ed:0f:49:f5:62:92:3c:54

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate results.trojantiming.com

20

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for results.trojantiming.com

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bucknellbison.anet.live
cnutfxc.anet.live
ellingtontiming.anet.live
iptt.anet.live
jmtiming.anet.live
live.2lraceservices.com
live.a2racemanagement.com
live.iatt.ca
live.kicktothefinish.com
live.northstartiming.com
live.palatinepack.com
live.reddirtrunning.com
live.snakerivertiming.com
live.sstresults.com
live.temporuntiming.com
onyourmarks.anet.live
results.athletics.org.ky
results.grizzlypeaktiming.com
results.ptgrouponline.com
results.trojantiming.com

Other certificates including the domain name trojantiming.com

(limited to 100 certificates)
live.roadrunnerracetiming.com
trojantiming.com
trojantiming.com
live.roadrunnerracetiming.com
trojantiming.com
rsupartner.com
live.roadrunnerracetiming.com
trojantiming.com
rsupartner.com
live.roadrunnerracetiming.com
rsupartner.com
trojantiming.com
live.roadrunnerracetiming.com
rsupartner.com
rsupartner.com
live.roadrunnerracetiming.com
live.roadrunnerracetiming.com
results.trojantiming.com
trojantiming.com
rsupartner.com
trojantiming.com
rsupartner.com

Certificate

The complete raw certificate details for results.trojantiming.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEE2Ib1gn+qcJ38aZi9GLmh5PUA5Bj
gEipkh4TBi0RPwbBzRfBIkkgetZT5erRgzCGGFmAFsVAuIJ2XjKRHnK0SQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 353498274892587916504796594473397211736942
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-12 18:11:47 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-12 18:11:46 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'results.trojantiming.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				000413621bd609fea9c277f1a662f462e68793d40390638048a9921e13062d113f06c1cd17c12249207ad653e5ead183308618598016c540b882765e32911e72b449
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							901c91a932b501e8c6f4038cfe2bf9178f0f2de9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (483 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bucknellbison.anet.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cnutfxc.anet.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ellingtontiming.anet.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iptt.anet.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jmtiming.anet.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.2lraceservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.a2racemanagement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.iatt.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.kicktothefinish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.northstartiming.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.palatinepack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.reddirtrunning.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.snakerivertiming.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.sstresults.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.temporuntiming.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onyourmarks.anet.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'results.athletics.org.ky'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'results.grizzlypeaktiming.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'results.ptgrouponline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'results.trojantiming.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018d9ebb8be600000403004730450220444a160a9ab3c8495e60458bebf0c856142fef265c21dc26644bd61088aa6aa802210084c869230ed48de7b8e10e90c6a558aa81068456ba10962ab90dbd406dbbfb2300750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018d9ebb8e5a0000040300463044022072573facfb28b21408f1cfd8a709f480396f89b513a4b46bccd8d33f46f3ff2d0220703102001db2929eb59c6588d61816dc82de1a167e42bd9b432cb06340881d9a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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