stonefamilyfund.org

Issued by R3

About this certificate

This digital certificate with serial number 04:d1:89:70:06:d4:00:9f:c6:f5:0b:c6:df:aa:c4:53:69:41 was issued on by Let's Encrypt.

With 15 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=stonefamilyfund.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:d1:89:70:06:d4:00:9f:c6:f5:0b:c6:df:aa:c4:53:69:41
Serial Number (int): 419750844324678836059311353303524017662273
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: b8:c9:6d:42:d3:b8:2d:d0:0c:21:c9:47:4d:f9:62:37:ee:1b:41:1e
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 43:46:0a:1b:c8:8a:ed:2f:a2:c3:e9:1f:95:e9:0a:97:00:5c:5a:28
Fingerprint (sha256): c8:c4:29:a1:4a:d2:36:9e:81:dd:87:91:ff:01:1d:7a:dc:84:aa:8e:34:20:95:75:08:e5:78:b0:c9:71:66:77

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate stonefamilyfund.org

15

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for stonefamilyfund.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bankruptcymeanstestcalculator.com
bizlaw.net
buxtonrealestate.com
debrassi.com
fkr.co.in
heloeye.com
hermeshandbags.net
jaredcummingsmedia.com
lgbtq.holiday
localbusinesstemplates.com
prichardhomes.com
reidhopkins.com
southparkrealtor.com
stonefamilyfund.org
truemuslim.com

Other certificates including the domain name stonefamilyfund.org

(limited to 100 certificates)
stonefamilyfund.org
stonefamilyfund.org
stonefamilyfund.org
stonefamilyfund.org
svenskarnashus.se
elizabethkeogh.ca
stonefamilyfund.org
stonefamilyfund.org
equa.life
manutenzionefotovoltaica.com
stonefamilyfund.org

Certificate

The complete raw certificate details for stonefamilyfund.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/oka5nY3pvmp1OSsEef
Wbh6/Q37cmFCX48PX61K5i0i4/8uCMf9CvoP1KomPsX00KsTYKghmRuIsRQY5wyH
Y/iCXaAW9kmiFprIq0WJRZLTsTiJWt6WFX9yQVX/WlgWJ83T5Llq1TDk+8bAaW8I
j52CoHNTiWtLkZhOkXsFWg7h2VzRNtc/gbAnbyaqwVSmuwHNnj/zAdT6h/ABHmjE
CtnP+30XhFxXWGSODnF0ccraW6xlQM+VUxpVT9p9h17sBunOJ2YjetkoKXUwBfE4
VRpXZFiEhcop58mwJWUuQVYf1Oh9PmbwJckk0eBMjwA7twNYdd8BLGtO1V3eMZ0q
MwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 419750844324678836059311353303524017662273
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-26 16:58:53 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-25 16:58:52 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'stonefamilyfund.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22720006338021480550838380594944000392552149085302435862203380357129175380650045963465233085926783216807066419930694384204576652707052529152084629572623969061676897120660503865942536213270227611856672983184503170385109914244108165869263676004701816147868610126175863780642176679832812169364697069610644741976844984604507889688227259695478480095229936514453725695372852343644864484971739042939162484596026381115760029279125201175856298839663014799113377262482392085080729324138155345974684095470433579061988797725445000620785691091958056143466463490199518497390523184503767269792761850727084458596891973871320478591539
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b8c96d42d3b82dd00c21c9474df96237ee1b411e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (293 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bankruptcymeanstestcalculator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bizlaw.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buxtonrealestate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'debrassi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fkr.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heloeye.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hermeshandbags.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jaredcummingsmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lgbtq.holiday'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'localbusinesstemplates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prichardhomes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reidhopkins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southparkrealtor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stonefamilyfund.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'truemuslim.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018d46ecb2f700000403004830460221008be6685f6da4fb018b5af2f1403c0faaf26015185d07003660dec249e67c6248022100fb89f669698cd3f62d98968c4f3c1c7954c65853f791f4808ff6495467a1e97800760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018d46ecb3aa000004030047304502210096a5ab6bcf136c4e3a6d7d6b2e029d89b8499664a088dd7965b486c6ee8348ff022075d576e4b206eea82e40d22b8ad7ecea755a498c86e7667f4e2bcf103de6c376
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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