sciforafrica.org

Issued by R3

About this certificate

This digital certificate with serial number 03:2f:85:91:ff:6e:73:9a:02:c4:4b:9a:cc:7f:64:a3:b2:da was issued on by Let's Encrypt.

With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=sciforafrica.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:2f:85:91:ff:6e:73:9a:02:c4:4b:9a:cc:7f:64:a3:b2:da
Serial Number (int): 277507674427814052855269101591244424065754
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: fc:e8:89:65:c2:c8:57:a7:20:88:e4:25:2d:95:56:73:2e:f0:e3:3d
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): aa:a8:90:87:aa:fc:ce:fb:28:16:b3:ec:16:66:9d:3f:69:27:d6:6f
Fingerprint (sha256): bb:1e:6b:34:d2:3b:bb:58:ba:61:ce:80:29:eb:19:4f:84:28:ee:bc:93:e0:c5:e7:a6:bd:d8:f9:5d:c7:7f:3a

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate sciforafrica.org

10

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sciforafrica.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

brasilv.com
divergenttheories.net
dritz.com
edenoneos.org
greatwallcasino.com
planeteducation.com
sciforafrica.org
seasonsinthesun.com
spectrumnez.com
thunderministries.com

Other certificates including the domain name sciforafrica.org

(limited to 100 certificates)
sciforafrica.org
watemplates.statenationals.us.sciforafrica.org
leeds.life
sciforafrica.org
sciforafrica.org
sciforafrica.org
scriptureuntangled.ca
sciforafrica.org

Certificate

The complete raw certificate details for sciforafrica.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5DZ3D9/9UICpqVYr+C6F
kGbwJnjIecs9O6RyOg8CUa8s/UdNPbkW6Q+3oVXIVZknmuxJfDAQ0c0H8MU6Nrto
SDl4mkrzf2V5vC9zA7VwljxKaOnsWIU2F1y0Y9rPOHq16LWujL4eO3Ygrzl/sPu4
rxpMUB15XQo8p6svsNSNhs/Bkw1m/yJASg/jkHssrWvs499qBFUcS6YGClUdH2kM
3h3xBMzvcJEfWk1Q7kvWyl8IBEereTc3FNQg/tzu5JINrhrMntIJM/0QRadRq6Pq
Ktu+Q4k41yk82H3n+qc8LUc7fHpPvKolSwAevDKRPe8LPsl87we+w2pxi3aiWlO/
twIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 277507674427814052855269101591244424065754
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-19 21:53:44 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-19 21:53:43 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sciforafrica.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28809191267160899131869879890242791787944647551334262541200559616351352754223435456488519461087951548298785062687168139058229041523463830119615437673844951497142417783319640475024914572016626278004911511516331597217939882276504022200523720757922753798403324414302950963117175123232081898854768497765452408408605438931271051120214962938481035801886652735228209654571634231066606015785738948298133316479122354978156537336423447312921674615032610362633311879079882542097850461562915300321863718610969390750221466109186662163743780996181516016116237164478373566419230453559832471233323137645352050374333462048289647214519
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fce88965c2c857a72088e4252d9556732ef0e33d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (186 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brasilv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'divergenttheories.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dritz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edenoneos.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greatwallcasino.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'planeteducation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sciforafrica.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seasonsinthesun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spectrumnez.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thunderministries.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee0075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018dc3934462000004030046304402207437f461817d5922085f2b85c2b0df35832917d50c06f20fcaf6f0b1f6a225a802205da300e6481d6ac43624b6bd11a099a4e00c7874cbf5050fccf479c91de32f7b007500a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018dc39344ee0000040300463044022021f4afc2dc89a40636b5f65cad5af6168d3c7f13ed6dbde1639362fc05ab31ad0220263975960a2baab326754919d20378455829dd163299d2644c95879e191218b5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		005bf3213bddb58612d6e720587ff607d3c69075999a47ab9be0434fe9ee567fe2df3046108cacd329998d164ab75ea0fd44f58d2cf56dcbc5c7bc1c764dcc9b3914f9744d3c9bbdc14f945064e3bb806d87583ff7721bef54b15afbe13056c9bee2748e19f9b08c9e18b300dc81818ce6038b0841efccb4628fc9116e7d52691df2fc5e2f2fc56eb6d84632f0c6bf4d56bb0462a3d828df03dd4b362805da64fc8ff0d00901fbb85b1bbc42000bbea5059f209b0d4954ae8bd8f3fa7e8dec290575b2251bff3469503eac1e650b4da8713bc765993da3aa5ae8e037aa9a604fc8d56b6238bda344a9d633b1bf2e9f907a7ea10e636629ef8b8a5b063bea705f18