freedomprojectmedia.org
Issued by R3
About this certificate
This digital certificate with serial number 04:9c:b4:03:0b:d1:72:22:1d:ad:99:ce:51:23:ee:6f:f7:c5 was issued on by Let's Encrypt.
With 11 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=freedomprojectmedia.org
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:9c:b4:03:0b:d1:72:22:1d:ad:99:ce:51:23:ee:6f:f7:c5Serial Number (int): 401772469822539761488785726700442189035461
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 3f:d5:ad:26:e1:6b:72:66:1d:a9:5c:3a:f5:1d:d1:3b:01:10:7e:e4
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 46:2d:0a:14:04:32:75:75:76:90:06:02:e3:73:c3:6c:22:61:23:3a
Fingerprint (sha256): cc:bf:0f:5b:ca:fb:21:74:97:51:dc:c6:1f:dd:bf:ac:6f:0d:6b:c2:59:7b:98:0d:ea:45:0a:3f:8c:53:4c:69
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate freedomprojectmedia.org
11
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for freedomprojectmedia.org
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
artoftheargument.com
bodymassagetherapist.com
entechboilers.com.contenttvremote.com
equusentertainment.org
freedomprojectmedia.org
healthyhometip.com.corporatised.com.overcomersprogram.com
highscale.in
questiongpt.org
stores4vip.com
taxoutsourcing.com
thevaccinereaction.net
bodymassagetherapist.com
entechboilers.com.contenttvremote.com
equusentertainment.org
freedomprojectmedia.org
healthyhometip.com.corporatised.com.overcomersprogram.com
highscale.in
questiongpt.org
stores4vip.com
taxoutsourcing.com
thevaccinereaction.net
Other certificates including the domain name freedomprojectmedia.org
(limited to 100 certificates)
www.freedomprojectmedia.org
www.freedomprojectmedia.org
www.freedomprojectmedia.org
canibuild.world
freedomprojectmedia.org
freedomprojectmedia.org
freedomprojectmedia.org
resumestudy.com.freedomprojectmedia.org
freedomprojectmedia.org
vindl.ie
www.freedomprojectmedia.org
sculpit.life
www.freedomprojectmedia.org
freedomprojectmedia.org
freedomprojectmedia.org
tulp.care
freedomprojectmedia.org
dew.sc
freedomprojectmedia.org
www.freedomprojectmedia.org
www.freedomprojectmedia.org
canibuild.world
freedomprojectmedia.org
freedomprojectmedia.org
freedomprojectmedia.org
resumestudy.com.freedomprojectmedia.org
freedomprojectmedia.org
vindl.ie
www.freedomprojectmedia.org
sculpit.life
www.freedomprojectmedia.org
freedomprojectmedia.org
freedomprojectmedia.org
tulp.care
freedomprojectmedia.org
dew.sc
freedomprojectmedia.org
Certificate
The complete raw certificate details for freedomprojectmedia.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGCDCCBPCgAwIBAgISBJy0AwvRciIdrZnOUSPub/fFMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzEyMTQwODM5NTNaFw0yNDAzMTMwODM5NTJaMCIxIDAeBgNVBAMT F2ZyZWVkb21wcm9qZWN0bWVkaWEub3JnMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A MIIBCgKCAQEAmcTXk6ARuiHLiO23f4cYkgF4bPep5RRGHMnU7OHp38leUO5aoade t+JqT+zhAq1LxSPI21FfYBgOH1NjhYVFpMaWjGEZCTfrKB7ZM0NTxi8uVjnJ0oNP sOX+BNAPbZ7xEWSGHun9X+iPw94MlAa0EVViCc9q0MCfL9z8TghcK1mk65y35scW eySQOoawtnypJ4kbdpQuILVAbytvjdzCl8sAnP4xMCaq8oelb6KIH7mbnlInQBmX yLvv3JoZimRIMNnomWZACEMteZiRZ0wo/PtoVQJP8OHIvC+zyDt7L5C7IAky29r/ 6yyNTxdYEBPfGNZQr4EtYVXMT3GIWCQrHwIDAQABo4IDJjCCAyIwDgYDVR0PAQH/ BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8E AjAAMB0GA1UdDgQWBBQ/1a0m4WtyZh2pXDr1HdE7ARB+5DAfBgNVHSMEGDAWgBQU LrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGG FWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmku bGVuY3Iub3JnLzCCASsGA1UdEQSCASIwggEeghRhcnRvZnRoZWFyZ3VtZW50LmNv bYIYYm9keW1hc3NhZ2V0aGVyYXBpc3QuY29tgiVlbnRlY2hib2lsZXJzLmNvbS5j b250ZW50dHZyZW1vdGUuY29tghZlcXV1c2VudGVydGFpbm1lbnQub3JnghdmcmVl ZG9tcHJvamVjdG1lZGlhLm9yZ4I5aGVhbHRoeWhvbWV0aXAuY29tLmNvcnBvcmF0 aXNlZC5jb20ub3ZlcmNvbWVyc3Byb2dyYW0uY29tggxoaWdoc2NhbGUuaW6CD3F1 ZXN0aW9uZ3B0Lm9yZ4IOc3RvcmVzNHZpcC5jb22CEnRheG91dHNvdXJjaW5nLmNv bYIWdGhldmFjY2luZXJlYWN0aW9uLm5ldDATBgNVHSAEDDAKMAgGBmeBDAECATCC AQYGCisGAQQB1nkCBAIEgfcEgfQA8gB3AEiw42vapkc0D+VqAvqdMOscUgHLVt0s gdm7v6s52IRzAAABjGeyZagAAAQDAEgwRgIhAMjED9MmgMOOmbkvc6lg7RPf/sbA AVT+ZmRO3HuA8y7sAiEAoE4GjMsCSvz4ss5DbRYfYqtcRuQlI9fpRrW1H/76aPEA dwCi4r/WHt4vLweg1k5tN6fcZUOwxrUuotq3iviabfUX2AAAAYxnsmXbAAAEAwBI MEYCIQDOzFJP/OpCx4mwGEGPdYZSPuTl8+l5FFOacqOEzgqNnwIhAK9LpR2wIw3K eMeMLkuZQ1LczdASFSsFARtrBIZaADQVMA0GCSqGSIb3DQEBCwUAA4IBAQAkxTll 8BqmQ9bvUJonmKhPFcLFCS7lQ7YCnfXBpzxcBYNZVeAUdOjwQleCeRcXMWEtUGIn pRBq3Ia7zq1EGZ1OC5SQGUc6gZ3/JS8mroUoljQ1MRmHyx+eACS+Ue1oveqmPT52 gGh9RKOhOn+2roWX6jVCcv8qzzBJv960dwxjLyp1BgwD/DiwdHAf0U6EPqwuKssD Z2SqRb3Qvwyo0kI4tzdcsRg+iPhjeixJN2dMBjHLjUzv/47kMkCdpc/+AX/qrZVe sRWEZfRi3u9Vuuh9rnRVWrvjyPo6bSEE5wBcMcWeUfmBNydq22m/aWlVRxgy4cyb t0k3XmjM/+K0qIvH -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmcTXk6ARuiHLiO23f4cY kgF4bPep5RRGHMnU7OHp38leUO5aoadet+JqT+zhAq1LxSPI21FfYBgOH1NjhYVF pMaWjGEZCTfrKB7ZM0NTxi8uVjnJ0oNPsOX+BNAPbZ7xEWSGHun9X+iPw94MlAa0 EVViCc9q0MCfL9z8TghcK1mk65y35scWeySQOoawtnypJ4kbdpQuILVAbytvjdzC l8sAnP4xMCaq8oelb6KIH7mbnlInQBmXyLvv3JoZimRIMNnomWZACEMteZiRZ0wo /PtoVQJP8OHIvC+zyDt7L5C7IAky29r/6yyNTxdYEBPfGNZQr4EtYVXMT3GIWCQr HwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 401772469822539761488785726700442189035461 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-14 08:39:53 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-13 08:39:52 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'freedomprojectmedia.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19411527115225040373068153283365876150417109599222908938661837372601424865233138663738203931975454093678456241559131910503284762993280680833276853411215909139117317089994839728265789065052619655393154735034090138367710860533161921113379434311150675480840182883259599307925833747122718587776711547213702253151377751475107518067159442108367358545949231727825040033970045297206921494291488871727705035074516320855036503563380460669613348847655297110948503759265339443716923372533066576498836225723197032342514811453326066879252265288184651610399099112460491407135414740965579580392185892234329419591941269924203051887391 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 3fd5ad26e16b72661da95c3af51dd13b01107ee4 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (290 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'artoftheargument.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bodymassagetherapist.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'entechboilers.com.contenttvremote.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'equusentertainment.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freedomprojectmedia.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthyhometip.com.corporatised.com.overcomersprogram.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highscale.in' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'questiongpt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores4vip.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taxoutsourcing.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thevaccinereaction.net' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) 00f200770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c67b265a80000040300483046022100c8c40fd32680c38e99b92f73a960ed13dffec6c00154fe66644edc7b80f32eec022100a04e068ccb024afcf8b2ce436d161f62ab5c46e42523d7e946b5b51ffefa68f1007700a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018c67b265db0000040300483046022100cecc524ffcea42c789b018418f7586523ee4e5f3e97914539a72a384ce0a8d9f022100af4ba51db0230dca78c78c2e4b994352dccdd012152b05011b6b04865a003415 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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