flanaganfilm.org
Issued by R3
About this certificate
This digital certificate with serial number 04:cd:02:ae:ea:96:5a:88:33:2c:93:5e:75:80:f7:e3:93:11 was issued on by Let's Encrypt.
With 19 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=flanaganfilm.org
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 04:cd:02:ae:ea:96:5a:88:33:2c:93:5e:75:80:f7:e3:93:11Serial Number (int): 418210595619474416426329449362329648206609
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: f2:34:2e:e8:a1:21:a3:b4:79:99:39:32:d7:2a:e0:db:a7:bc:de:65
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 05:ce:66:10:f7:db:2b:ed:50:4c:58:b2:2a:34:c2:49:81:90:59:42
Fingerprint (sha256): ca:55:0f:88:c1:1c:8f:43:75:d9:47:57:96:0e:d0:39:b5:50:57:35:60:3f:58:f3:a0:d3:3a:ce:34:4f:02:3c
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate flanaganfilm.org
19
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for flanaganfilm.org
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
aboutstl.com
arbitragedeal.com
campionesse.com
caocredit.com
devshops.com
flanaganfilm.org
gab.studio8424.com
habitatsformonarchs.com
homeschoolsummerstudy.com
hudgins-wills.com
morganelectric.com
mrbubblesexpresswash.com
olfattificio.com
quotidiamo.com
qvxxx.com
sweeneyaerospace.com
thebumpfirekiing.com
todge.com
vaunage.com
arbitragedeal.com
campionesse.com
caocredit.com
devshops.com
flanaganfilm.org
gab.studio8424.com
habitatsformonarchs.com
homeschoolsummerstudy.com
hudgins-wills.com
morganelectric.com
mrbubblesexpresswash.com
olfattificio.com
quotidiamo.com
qvxxx.com
sweeneyaerospace.com
thebumpfirekiing.com
todge.com
vaunage.com
Other certificates including the domain name flanaganfilm.org
(limited to 100 certificates)
Certificate
The complete raw certificate details for flanaganfilm.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGPjCCBSagAwIBAgISBM0CruqWWogzLJNedYD345MRMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDA0MTYwNTE2MDJaFw0yNDA3MTUwNTE2MDFaMBsxGTAXBgNVBAMT EGZsYW5hZ2FuZmlsbS5vcmcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCpdKzPW4zOyzrD4kS+bJU/Ou3Vr1FUkYD1NFiwURxHTUO9UXQ0J8CT3kFkdxMU D8Vb/i9Uo8/wdHQYWjaeXKS/eiS6m3ukPlViwOmUg4Yohh9Xrw5sqPdv/B6l6xnC o2Xpzf1H+p38YYGHKM0FN8wxwH1lKtpX5xu9SOTsBpdCMvt5rpXmLAYlEHwzTOIx QLXimHPTLsLaG9sA9snpGgMY7sWZaocHMPyKns7fYbRfAHFmLCgXAprtL4I/eYD1 eE8U+HN1JWLmVu4X2FmkcmGt6ABEbj0EMM8+8zpcYKjRNXflr3u/UYCECeCIL1i0 0oIem2arxlpdCPQOA7i9rlSvAgMBAAGjggNjMIIDXzAOBgNVHQ8BAf8EBAMCBaAw HQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYD VR0OBBYEFPI0LuihIaO0eZk5Mtcq4NunvN5lMB8GA1UdIwQYMBaAFBQusxe3WFbL rlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0cDov L3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5jci5v cmcvMIIBaAYDVR0RBIIBXzCCAVuCDGFib3V0c3RsLmNvbYIRYXJiaXRyYWdlZGVh bC5jb22CD2NhbXBpb25lc3NlLmNvbYINY2FvY3JlZGl0LmNvbYIMZGV2c2hvcHMu Y29tghBmbGFuYWdhbmZpbG0ub3JnghJnYWIuc3R1ZGlvODQyNC5jb22CF2hhYml0 YXRzZm9ybW9uYXJjaHMuY29tghlob21lc2Nob29sc3VtbWVyc3R1ZHkuY29tghFo dWRnaW5zLXdpbGxzLmNvbYISbW9yZ2FuZWxlY3RyaWMuY29tghhtcmJ1YmJsZXNl eHByZXNzd2FzaC5jb22CEG9sZmF0dGlmaWNpby5jb22CDnF1b3RpZGlhbW8uY29t gglxdnh4eC5jb22CFHN3ZWVuZXlhZXJvc3BhY2UuY29tghR0aGVidW1wZmlyZWtp aW5nLmNvbYIJdG9kZ2UuY29tggt2YXVuYWdlLmNvbTATBgNVHSAEDDAKMAgGBmeB DAECATCCAQYGCisGAQQB1nkCBAIEgfcEgfQA8gB3AEiw42vapkc0D+VqAvqdMOsc UgHLVt0sgdm7v6s52IRzAAABjuWMUr8AAAQDAEgwRgIhAImlY6dDdgT0hc0mdMAM 5EXNSR9exrrBUhOH6uT6CCcFAiEAsvkm/6WVdRRvoWZI0yYDiMIa/u3cQ3uu5ARo IcmT3ZgAdwDf4VbrqgWvtZwPhnGNqMAyTq5W2W6n9aVqAdHBO75SXAAAAY7ljFOI AAAEAwBIMEYCIQD7tPHgzhqjgGgytcTcfXxO/gBQ5zshsN+tPOmIZ7PTegIhAIKA gVh5eeOXvmJPxIHct/Rfp4U2bQlhdjDGHt+3SPL6MA0GCSqGSIb3DQEBCwUAA4IB AQAPwtQN7dwbQCYfqZrmOTIai0a5A94xKINkaHsP0oM0yG7yXkSB7jjGD38O5Gvp YmCnDCMAJemMfylG1JKn62ocmnHCcA6R9BItgZh4rzI+lcuVY9Q1WF6XqR+V+TbN wnQdSWeDumJ7f6xtvisZaQ2VWbJTgOf5YVvC0Xb6eLhnUzNAQAJpX8C1D21hGbOG 24iIsnyW2ybSL9u2ewn6srhq9fu9oyzz5uw/kB+cTFuPvekmR50FomuJKDeCTOrd oucSpuzVlBeN4Y5OTnE4Qw1u5MJOJcUmeNd+2N94OOsbCGX/s8vZTZws9ZWx8RRq A60ChgIFhKo9/rYnvKw7F37m -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXSsz1uMzss6w+JEvmyV Pzrt1a9RVJGA9TRYsFEcR01DvVF0NCfAk95BZHcTFA/FW/4vVKPP8HR0GFo2nlyk v3okupt7pD5VYsDplIOGKIYfV68ObKj3b/wepesZwqNl6c39R/qd/GGBhyjNBTfM McB9ZSraV+cbvUjk7AaXQjL7ea6V5iwGJRB8M0ziMUC14phz0y7C2hvbAPbJ6RoD GO7FmWqHBzD8ip7O32G0XwBxZiwoFwKa7S+CP3mA9XhPFPhzdSVi5lbuF9hZpHJh regARG49BDDPPvM6XGCo0TV35a97v1GAhAngiC9YtNKCHptmq8ZaXQj0DgO4va5U rwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 418210595619474416426329449362329648206609 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-16 05:16:02 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-15 05:16:01 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'flanaganfilm.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21391808145351833057595634587569648998699492639159585017195387062436946774133587966374715750835084009435135105380510669700435693204938642461486644228175754944232599391056736564603838734268456356453582164883495799091598651268159867189134698444191199396266859793002970048440860392964214293524834591828925501900650437782278553381287350504727484271753474713391115183448836239437696399752281637296937643685812523582914112467377185833284274702233830082679551278857935416608650323090568023791823924595570508110866628187907836409142486829304827466499626134806334100351132645842006761484279542117511555279050229065183161898159 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) f2342ee8a121a3b479993932d72ae0dba7bcde65 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (351 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aboutstl.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arbitragedeal.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campionesse.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caocredit.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devshops.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flanaganfilm.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gab.studio8424.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'habitatsformonarchs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homeschoolsummerstudy.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hudgins-wills.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'morganelectric.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mrbubblesexpresswash.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olfattificio.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quotidiamo.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qvxxx.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sweeneyaerospace.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thebumpfirekiing.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'todge.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vaunage.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) 00f200770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018ee58c52bf000004030048304602210089a563a7437604f485cd2674c00ce445cd491f5ec6bac1521387eae4fa082705022100b2f926ffa59575146fa16648d3260388c21afeeddc437baee4046821c993dd98007700dfe156ebaa05afb59c0f86718da8c0324eae56d96ea7f5a56a01d1c13bbe525c0000018ee58c53880000040300483046022100fbb4f1e0ce1aa3806832b5c4dc7d7c4efe0050e73b21b0dfad3ce98867b3d37a022100828081587979e397be624fc481dcb7f45fa785366d09617630c61edfb748f2fa . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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