ganchl.org
Issued by R3
About this certificate
This digital certificate with serial number 04:75:14:07:b5:9d:1c:3f:0e:72:3b:9c:2c:a6:a9:8a:fb:39 was issued on by Let's Encrypt.
With 18 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=ganchl.org
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:75:14:07:b5:9d:1c:3f:0e:72:3b:9c:2c:a6:a9:8a:fb:39Serial Number (int): 388288805246348196459475738996345471171385
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 87:67:21:b2:c2:66:82:f7:10:c4:11:49:e3:16:4c:ed:f0:ca:75:2f
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 4d:9b:e8:3a:c4:0f:cf:4f:76:0e:0e:52:08:cb:61:62:eb:0e:f8:cd
Fingerprint (sha256): cd:55:25:9a:d9:54:d9:f8:c3:6d:38:e9:79:94:f6:d6:d2:4f:03:cc:15:24:7c:ad:9a:42:9e:73:bf:80:2a:3c
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate ganchl.org
18
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for ganchl.org
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
arbitragearbitrage.com
arbitragehacks.com
duersata.com
elementalgarden.com
ganchl.org
gaysupplements.com
goanimation.in
hempshives.com
honscharnyc.com
ipauctions.com
metaversesoccerplayer.com
ohcalls.statenationals.us
stepfathersex.com
thedisastermastersplan.com
washingtonparish.com
watch3dtv.com
worldvolunteers.com
yinyangtheory.net
arbitragehacks.com
duersata.com
elementalgarden.com
ganchl.org
gaysupplements.com
goanimation.in
hempshives.com
honscharnyc.com
ipauctions.com
metaversesoccerplayer.com
ohcalls.statenationals.us
stepfathersex.com
thedisastermastersplan.com
washingtonparish.com
watch3dtv.com
worldvolunteers.com
yinyangtheory.net
Other certificates including the domain name ganchl.org
(limited to 100 certificates)
Certificate
The complete raw certificate details for ganchl.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGPDCCBSSgAwIBAgISBHUUB7WdHD8OcjucLKapivs5MA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDAxMjYwODQ4NDNaFw0yNDA0MjUwODQ4NDJaMBUxEzARBgNVBAMT CmdhbmNobC5vcmcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeO8BC LHCSKGCibNiJ6jHEcPPWm9xBbPFULYl+yyPcAXvKhU3UZE9PQLWH7QK97Xx59jSH FTrBfkfYS5ZYSIhP22nDmQKS4GSfiZjPPKuJACm11zOqVMfJFR6GhuYzjGis8zDN O9I6w9aaNLay9H5yWQnX1KnRhrZOW7sv06cLGNAtOphRKFolrKzdpkHwZYPJgWkv pBphYTCVmszDkXVw50pqAR42pAk+XVSp61MdO/NBrLzFcMmkEbA+rekdUdVoyRTt /xPDQbowKPYdeC/j+k2+2EL36PfmHvZ6k0U7WTwiB3mDPPEoQeTjBxd7igoT7eJF 73nQT7c19cTFW92bAgMBAAGjggNnMIIDYzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0l BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYE FIdnIbLCZoL3EMQRSeMWTO3wynUvMB8GA1UdIwQYMBaAFBQusxe3WFbLrlAJQOYf r52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0cDovL3IzLm8u bGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5jci5vcmcvMIIB bwYDVR0RBIIBZjCCAWKCFmFyYml0cmFnZWFyYml0cmFnZS5jb22CEmFyYml0cmFn ZWhhY2tzLmNvbYIMZHVlcnNhdGEuY29tghNlbGVtZW50YWxnYXJkZW4uY29tggpn YW5jaGwub3JnghJnYXlzdXBwbGVtZW50cy5jb22CDmdvYW5pbWF0aW9uLmlugg5o ZW1wc2hpdmVzLmNvbYIPaG9uc2NoYXJueWMuY29tgg5pcGF1Y3Rpb25zLmNvbYIZ bWV0YXZlcnNlc29jY2VycGxheWVyLmNvbYIZb2hjYWxscy5zdGF0ZW5hdGlvbmFs cy51c4IRc3RlcGZhdGhlcnNleC5jb22CGnRoZWRpc2FzdGVybWFzdGVyc3BsYW4u Y29tghR3YXNoaW5ndG9ucGFyaXNoLmNvbYINd2F0Y2gzZHR2LmNvbYITd29ybGR2 b2x1bnRlZXJzLmNvbYIReWlueWFuZ3RoZW9yeS5uZXQwEwYDVR0gBAwwCjAIBgZn gQwBAgEwggEDBgorBgEEAdZ5AgQCBIH0BIHxAO8AdgCi4r/WHt4vLweg1k5tN6fc ZUOwxrUuotq3iviabfUX2AAAAY1FK/F3AAAEAwBHMEUCIB+4Z3gso2gb/JFiZvaO EKJem0c9+lX9/K1liblstP5DAiEAxFIDhuXUcs7MCEX2+XFlu5BVIe+ARGJEjpr2 S8ElnqkAdQDuzdBk1dsazsVct520zROiModGfLzs3sNRSFlGcR+1mwAAAY1FK/H/ AAAEAwBGMEQCIB0KS3msNMNwv9svFyjcD5yqE6R6dFbhAMBMkcsG2OuuAiBoBK5e kzvB72WgtVTp5Fht0BWFVg84rWkrPKkie0o7lDANBgkqhkiG9w0BAQsFAAOCAQEA hWyRy4+Xbnp6MLNxPe+5mHkfJob4TUCMUZgBseVjQN1VutaCHpwgQrv8sT2TmIaQ 201juwb7UM0h9Wz0xl2mqM114G34TTHmQGd+RErtK8e9iPiNth/FAyQ2OdNvbpi+ KX8OehsSOeLVNy9cYw4e3NaiK36MuScTyrl8ED9pyoec8sVR2ZZaN3HWoSmZf0gK 9jsIcPAWqKesB1NJ9qx8gYpghEVdyNWgYLsf2mk/dcFsXsRUV/G7RFLaQZDx+8vz sFq1ClJJ3N13jcg98xlHc+PC6+NwU5kQoc9jR8hASAxWeyhys7ZLFt+9MQt2esnh 5UDZyDjAtJiO2x//RY2VrQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3jvAQixwkihgomzYieox xHDz1pvcQWzxVC2Jfssj3AF7yoVN1GRPT0C1h+0Cve18efY0hxU6wX5H2EuWWEiI T9tpw5kCkuBkn4mYzzyriQAptdczqlTHyRUehobmM4xorPMwzTvSOsPWmjS2svR+ clkJ19Sp0Ya2Tlu7L9OnCxjQLTqYUShaJays3aZB8GWDyYFpL6QaYWEwlZrMw5F1 cOdKagEeNqQJPl1UqetTHTvzQay8xXDJpBGwPq3pHVHVaMkU7f8Tw0G6MCj2HXgv 4/pNvthC9+j35h72epNFO1k8Igd5gzzxKEHk4wcXe4oKE+3iRe950E+3NfXExVvd mwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 388288805246348196459475738996345471171385 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-26 08:48:43 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-25 08:48:42 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ganchl.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28054368023512615165827277968034259282637239460402890823295906005835612922391142964653969187653908221411381653326924616709009510629713045074685465259445367098277647586077375382929265306190019790706533188256713001305896325362118591049248735864580981725286604314436742482254040976392022713037647358783892180273083486327720498271702057147590260256358015406731980527243961587665611006491385117466649326712783567717758139533051882642408485122047407843331324504029690887398520804532267809966529317120331843909687128062463693016509279756154633173180829451935119821656913148676404370178189510616076273763311595042371356319131 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 876721b2c26682f710c41149e3164cedf0ca752f . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (358 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arbitragearbitrage.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arbitragehacks.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'duersata.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elementalgarden.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ganchl.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gaysupplements.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goanimation.in' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hempshives.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'honscharnyc.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipauctions.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metaversesoccerplayer.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ohcalls.statenationals.us' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stepfathersex.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thedisastermastersplan.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'washingtonparish.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watch3dtv.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'worldvolunteers.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yinyangtheory.net' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018d452bf177000004030047304502201fb867782ca3681bfc916266f68e10a25e9b473dfa55fdfcad6589b96cb4fe43022100c4520386e5d472cecc0845f6f97165bb905521ef804462448e9af64bc1259ea9007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018d452bf1ff000004030046304402201d0a4b79ac34c370bfdb2f1728dc0f9caa13a47a7456e100c04c91cb06d8ebae02206804ae5e933bc1ef65a0b554e9e4586dd01585560f38ad692b3ca9227b4a3b94 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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