c12giving.org

Issued by R3

About this certificate

This digital certificate with serial number 04:17:b8:1d:ab:ae:25:7a:6b:76:3e:56:a7:02:6a:9c:e7:30 was issued on by Let's Encrypt.

With 21 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=c12giving.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:17:b8:1d:ab:ae:25:7a:6b:76:3e:56:a7:02:6a:9c:e7:30
Serial Number (int): 356520370176145234720474183282162130544432
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: e0:ad:d4:90:4d:43:b8:87:05:42:b5:c7:88:52:00:8e:c2:fa:a2:ab
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): a2:f5:61:73:97:dd:53:ad:3b:4e:72:c6:c1:da:c3:b3:a8:cd:68:bc
Fingerprint (sha256): b3:93:e6:94:fa:96:b0:55:90:6a:22:9e:1b:96:b5:61:2a:d2:b8:c8:02:31:c8:22:76:5d:30:4d:46:83:fa:74

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate c12giving.org

21

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for c12giving.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

amarsons.in
attorneyad.com
c12giving.org
ccdiscount.creationtrail.org
fpk.co.in
greenvillemarketingagency.com
gurudirectory.com
hempdoctor.org
i-hemp.com
jwt.co.in
lbbua-discount.staybridgelubbock.com
madivorce.com
mcgavock.buzzank.com
perteller.net
refugiocounty.com
reidhopkins.com
soundsgoodproductions.com
sugarcookierecipe.com
tradewithcarbon.com
tribeclubs.com
uptoncounty.com

Other certificates including the domain name c12giving.org

(limited to 100 certificates)
c12giving.org
c12giving.org
cbbt.bible
cbdc.co.za
blazingfast.hacker.rehab
knightsoflasalette.org
c12giving.org
fflsd.org
vmm.co.za
c12giving.org
c12giving.org

Certificate

The complete raw certificate details for c12giving.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2V0vqsFWPwQFBd2nN+MB
OiJ8/ISfsTD2HHMo4ejMkH3paS44SMKiMStoeCe3pwqM0et3VVA9tGiJlQo9I9Ms
rrhN5eXT2CPz+/WmuJE3jv5NMFBR60UxqdikncVWpnFjEg+1LuIdsnwy8qrdqihv
EgMvCy+0a6OqMDrYr9KisELD50FoQ41eIVbSXnlrGhgOL6+LN5FKchWUw3DvqHna
JEC25i/chXxgWyUEENDTtOhMwUXspYx00tRpDeFpUyWtPafdnsrzQ94CmdcJ2Z3E
pJMMMlX+HvPMnuzUiaCDzgchLFW5bdjEiztHya4UK549x1tatCIncogumGBa1hqd
8QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 356520370176145234720474183282162130544432
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-13 06:45:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-11 06:45:07 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'c12giving.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27439664005141796492351774045200239946801546408389252867544375197819835624513174383110771231408692152869594673250815038037396432334147685876300466939405248800832503962062928771406982401052403266707920883099219251343545631398532503115273659374251293274396166625723044250639648850868780469223016204516545211957615506158846044559369381274144075658268477256414082312893791254112603135628593201881932283840348320910073358662418931208615264732597001520335561374595247216256667763150652499502683976250261244775845361687421505879732700793895635741555814340491302894989312671877545724439033000740986682178504341991817597328881
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e0add4904d43b8870542b5c78852008ec2faa2ab
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (408 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amarsons.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'attorneyad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c12giving.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccdiscount.creationtrail.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fpk.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greenvillemarketingagency.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gurudirectory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hempdoctor.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i-hemp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jwt.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lbbua-discount.staybridgelubbock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'madivorce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcgavock.buzzank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perteller.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'refugiocounty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reidhopkins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soundsgoodproductions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sugarcookierecipe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tradewithcarbon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tribeclubs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uptoncounty.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018e36c5ade90000040300473045022070687f3b555c7ac3cbf0b48bc5c18a3142614794f6b7c7d4a65c409602fc4c6102210096b696ff652d999e3fa73586b62e0a3328067eb07fbf2b2b4d94daeb60cd365200760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018e36c5adcd00000403004730450221008b038c4fd1f3673bbd17fd521f100ea98bd8dca8c9c32f906ac7205edcb99b30022013a3c9619a83dd7fc09e12d42d07081388fef1f7298dae5a2389c2c12635cde3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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