republika.org

Issued by R3

About this certificate

This digital certificate with serial number 03:d2:43:91:58:e6:d5:23:90:c9:0f:84:fe:22:10:b8:9a:cf was issued on by Let's Encrypt.

With 16 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=republika.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d2:43:91:58:e6:d5:23:90:c9:0f:84:fe:22:10:b8:9a:cf
Serial Number (int): 332885967810580379983524173418882833881807
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e7:44:4b:f5:f4:dc:93:2c:15:ef:4f:8b:d7:3a:7e:79:cb:ab:25:83
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): e3:5f:73:31:fb:ff:5f:e1:ab:90:a2:55:9f:f7:aa:a1:11:e8:34:08
Fingerprint (sha256): b8:c9:97:81:4e:d4:34:d0:3e:fd:d9:eb:10:9d:27:0b:39:f3:89:ad:bc:18:b9:73:36:07:09:30:4e:f0:60:a5

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate republika.org

16

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for republika.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

50stateshalfmarathon.com
allureventures.net.tampataxservice.com
bloomfieldbankruptcyattorney.com
doctorpharma.com
domainstocash.com
ellsworthcounty.com
fortworthmomguide.com
fourwindsdesign.com
goadentist.in.findability.info
icollectibleshop.com
jahcannabis.com
pressurewashmaitland.com
professionalforextrader.com.vidscript.com
proudboysbayarea.com
republika.org
ultimatearms.com.awc420.com

Other certificates including the domain name republika.org

(limited to 100 certificates)
rayon.in.republika.org
republika.org
californiaprivateschools.net.enerpac.asia
tvfour.co.za
republika.org
republika.org
thebiblecourse.ca
republika.org
tvtwo.co.za
republika.org
republika.org
tgirlcanada.ca

Certificate

The complete raw certificate details for republika.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4cyTL83nZ9m/QzFWnXJJ
wcAKgQZ92ImxVSWpDyQGwixcz0YwFufZfyWk1O4Q1xXAdr791lDBp+N/HtNcuLxy
FyLkyqdohNWeGj1Jf3a0vuwOoluzWwA3pKgodJrQev20xt5WtaWj4xVac/YC2Dq8
N79+9xGsLhpKqjjxlbKk8wkwf7qqGg79tYsYY0y3Pwg9hCmHCOrrAArgUyLe+z3X
Lj5aBcescukjjbCUSy3g1YNlqGAu9TUtbD2Y7jcmV89g2MaBvu0L+nNuhd/7dszL
S146yiCF0z4tjykgdoEiRrO+ipoB3OTjFe5D5MwoYpXWxkJS0pfS9zuz/QX62y0a
PQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 332885967810580379983524173418882833881807
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-25 16:59:51 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-24 16:59:50 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'republika.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28504498284150335953794476466259442044270913224990201242339427084277494049707812880232056003668264453755971941299991940354865499192085585351064456657810460085245824040171955733371154399092103123713915434788779136054507014172155993697592928239704090810122693249676608731228009976498054085137139730753097351227561835569501401597703053605171463626126099761435254471306211046994673676903157994485433315637085791738513509213072104623505556851384563908254585958521556829620947088222461369167813645141105206170190583991013698108634829111820221918340448083790813743209117008958243529166634429841548917219466238983448436742717
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e7444bf5f4dc932c15ef4f8bd73a7e79cbab2583
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (412 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '50stateshalfmarathon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allureventures.net.tampataxservice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bloomfieldbankruptcyattorney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doctorpharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'domainstocash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ellsworthcounty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fortworthmomguide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fourwindsdesign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goadentist.in.findability.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icollectibleshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jahcannabis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pressurewashmaitland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'professionalforextrader.com.vidscript.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'proudboysbayarea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'republika.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ultimatearms.com.awc420.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018ca22214cb0000040300473045022012e0d684a239c9c3397cc77b1fb317e09719262e8218052683811449fd96558a022100df3b0c69836c4b8afb71cbf6327ab10f053152006f399ecff0481e084f0909fd007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018ca22214c40000040300473045022100ae58ce227639a9ef30c53edef36401f591ec96cc4f33930a246995037795f6e60220799937e237af212a3ccd6e95f042444970d12282c6780ecab5f84b01baf15f92
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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