*.chalkdoc.com

Issued by R3

About this certificate

This digital certificate with serial number 03:41:de:82:40:d4:23:21:0b:06:0e:01:db:53:ac:14:5f:88 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.chalkdoc.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:41:de:82:40:d4:23:21:0b:06:0e:01:db:53:ac:14:5f:88
Serial Number (int): 283750976573679057925051864290143765815176
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 6f:1d:6e:c1:a0:65:b1:d2:93:ca:e4:cd:61:c6:a9:b4:f0:cf:0e:53
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 64:71:89:1d:35:ad:09:b2:d1:33:c7:28:87:c1:75:0c:93:86:55:44
Fingerprint (sha256): bc:aa:60:68:86:31:50:c0:ed:d4:19:70:b1:2d:cb:6b:b5:90:ed:3a:72:93:be:cb:10:b0:9c:34:5c:85:4b:b0

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate *.chalkdoc.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.chalkdoc.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.chalkdoc.com
chalkdoc.com

Other certificates including the domain name chalkdoc.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for *.chalkdoc.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIE9zCCA9+gAwIBAgISA0HegkDUIyELBg4B21OsFF+IMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzA5MTIwNjEyMzlaFw0yMzEyMTEwNjEyMzhaMBkxFzAVBgNVBAMM
DiouY2hhbGtkb2MuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA
tlDTxgXFdl3jpHIOBqGJ87po8eInIsHQHcTzIbX9haqNS9RNbI2XFl5NYJCUMTRq
7ibGktDDPSMypNOWXVFuskl3KZYCXwnWCJoznWqDa04LqnlCJ+zAgRr/cYRDIrCl
OSKxfweKcuYnFbDom40rHFRx3KqR0vuvDMKjgZR/o6/R4C0ECURYcDVQFYA6LKZ7
jW2No67Fol+deVVkZJoNxf5WmzEt/nygaOJUTt75Xky6kJmjCJ1Nv8CB0wWOVY62
QSpX6/usVMi0Ag3krTbCC9qZhyrmxdJLFBLf1x9gpbRL7y4xlFoLUHtmR7Ykdw9/
uU9tonAXwzR6CA2hvc1n6wIDAQABo4ICHjCCAhowDgYDVR0PAQH/BAQDAgWgMB0G
A1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1Ud
DgQWBBRvHW7BoGWx0pPK5M1hxqm08M8OUzAfBgNVHSMEGDAWgBQULrMXt1hWy65Q
CUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGGFWh0dHA6Ly9y
My5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmkubGVuY3Iub3Jn
LzAnBgNVHREEIDAegg4qLmNoYWxrZG9jLmNvbYIMY2hhbGtkb2MuY29tMBMGA1Ud
IAQMMAowCAYGZ4EMAQIBMIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDwAHYAejKMVNi3
LbYg6jjgUh7phBZwMhOFTTvSK8E6V6NS61IAAAGKiDwt8gAABAMARzBFAiAVED8E
8RKjDbXLYyK4u4l90XKLqI3ePzHnu0eZcPgmcAIhAOP2e2rWbKRe6SsWoH5ftopu
u/Zl621lLl2+m+WWwL7OAHYA6D7Q2j71BjUy51covIlryQPTy9ERa+zraeF3fW0G
vW4AAAGKiDwt3QAABAMARzBFAiAVhyRYAWkUM3qeAuK/vPYlYWRD42D648XbRQIK
8FgFWwIhALC2TLFO0L0V5rCDgXOHc/EPbCiB7vuMSFUdWYHA7p3+MA0GCSqGSIb3
DQEBCwUAA4IBAQC2lrmizulJGLr9/UuLUk1DmTKtUCY8nj+JnNHyKzJGn9Zzg3fk
w4743vnQomdBBzFV5Ns9wDLEpRXoHF7HmQ/NDdBggxReOJAcIwq+SIOxF4lDOhv6
BYRtakTDMoRnMHlsDIGY5rJ2EP+luCxapn55uO7qBM57GYZ6sB1yAVjju3VhQ+6T
Zj57Lt6n5BLOxiZdfTg6cgtMzhBZbPooVMK8JkJFGSzDjkNNoypzFlGJ1eC2J3Mq
iQdDFQASVBmsfgueHGwSMWD5occ8XB5HBDQwPrcXiBgM94l/OXNH3Qx0SkYDs2J7
XeZNYDT5LmErbVcvHvlHZLaw8q84XDAo40tE
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlDTxgXFdl3jpHIOBqGJ
87po8eInIsHQHcTzIbX9haqNS9RNbI2XFl5NYJCUMTRq7ibGktDDPSMypNOWXVFu
skl3KZYCXwnWCJoznWqDa04LqnlCJ+zAgRr/cYRDIrClOSKxfweKcuYnFbDom40r
HFRx3KqR0vuvDMKjgZR/o6/R4C0ECURYcDVQFYA6LKZ7jW2No67Fol+deVVkZJoN
xf5WmzEt/nygaOJUTt75Xky6kJmjCJ1Nv8CB0wWOVY62QSpX6/usVMi0Ag3krTbC
C9qZhyrmxdJLFBLf1x9gpbRL7y4xlFoLUHtmR7Ykdw9/uU9tonAXwzR6CA2hvc1n
6wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 283750976573679057925051864290143765815176
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-12 06:12:39 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-11 06:12:38 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.chalkdoc.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23015228901537035680839586847986860084938326869687479134967484710144872597332745593169057674739860017188612714781302225534554489363716918417036552319921987072415231122038628587013892365969002095777244583130624585264399409949527778430849841932383232980306396402848728948257486917462984086718547747500647321710313941423240865113652664195470058094468007942447997046974268163190706208308928637011414699360855029150293576702722003853702455845935188904802921775487988634724546772317666921654845254148059487567221797393120575392060592439739290902005042338624026967743357162280756835480301464737278577477887576955991580567531
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6f1d6ec1a065b1d293cae4cd61c6a9b4f0cf0e53
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chalkdoc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chalkdoc.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018a883c2df20000040300473045022015103f04f112a30db5cb6322b8bb897dd1728ba88dde3f31e7bb479970f82670022100e3f67b6ad66ca45ee92b16a07e5fb68a6ebbf665eb6d652e5dbe9be596c0bece007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018a883c2ddd0000040300473045022015872458016914337a9e02e2bfbcf625616443e360fae3c5db45020af058055b022100b0b64cb14ed0bd15e6b08381738773f10f6c2881eefb8c48551d5981c0ee9dfe
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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