okanogan.cam

Issued by R3

About this certificate

This digital certificate with serial number 03:c7:d1:d6:94:f6:cb:42:77:b8:50:9f:d2:4d:71:fe:56:c5 was issued on by Let's Encrypt.

With 15 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=okanogan.cam

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c7:d1:d6:94:f6:cb:42:77:b8:50:9f:d2:4d:71:fe:56:c5
Serial Number (int): 329331971636543923170048345959339304834757
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 50:94:9a:ab:27:87:10:e8:90:0e:9b:bf:d0:88:e1:73:f0:13:42:7b
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 68:1b:e2:05:1e:7c:e1:49:f5:9c:b2:9a:70:1e:73:bd:68:a0:3b:52
Fingerprint (sha256): d0:8e:28:5d:17:42:cd:cc:a4:0a:59:97:6f:cc:d7:d5:d1:42:1c:96:4c:82:14:60:e6:d6:ee:9e:a9:8d:08:85

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate okanogan.cam

15

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for okanogan.cam

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

affiliatemarketingprograms.net
agifunding.com
arbitrageurly.com
caelin.tv
eadtmoney.com
getconnectedct.com
houstontxkitchenremodeling.com
kinesiology.in
massageguys.com
okanogan.cam
palmbeachliberty.com
rawnewslive.com
spend100.com
summercampsanantonio.com
vovini.com

Other certificates including the domain name okanogan.cam

(limited to 100 certificates)
okanogan.cam
wpv.co.za
escortof.com.reginaangelorumpress.org
kiesza.ca
thehoardinginstitute.org
getabetterjob.ca
schoolhousemarketing.org
okanogan.cam
bioabout.me
gocashless.org

Certificate

The complete raw certificate details for okanogan.cam in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4XuInOqJYGOqrKTym/rs
FglRQ1SHyPVM/Bpi1Q1hLF5dER4Yl/ZSOtat+TfSpCj5wztVxKxIdn6A5Xtdy/gh
6XiX+atuSYj/9UCFEJI63jHLDBN4CUJf0pmTcmAvLuz5jWWNIWBe25lcX05OtWlY
sKSKzADmJqY8kRrjK/lr8q9hwehDn0AqjXnmtrvYQ7zeBVgMPZTRlXaC6ncwl5K+
dO49t29JMF3898YbH87JK2VTkVLoGFa6Jmk96Uwg9sJBfPudOA29EeRyLpXc2DX6
ZGTOX/fzr2Mdqqa049Eg8xFwWuZDvIqXUQFx3X6Lw+fcfnSUm0ueMLxwmrk5cSJ7
iwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 329331971636543923170048345959339304834757
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-26 19:07:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-25 19:07:53 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'okanogan.cam'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28464535327789343866089937858317911179054790004689778722262367909820782243179415504303564891994519607374580516139788673949273312370025540004527932584640933572063844941719526165964512349493122819233068997109123648958980933368821635020647137998521470123758422157401288618517985753499491886432099314977252473861692535900113580971828914287941499265315168260633268937087825202547125386177480485242876999702197066627187493634115953298523064038998246147506401619366788236691613130629599041935614288557522295254625395780617370666963692043387348606719725696116149827997627974901137256685578768900945755110548337615843851664267
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							50949aab278710e8900e9bbfd088e173f013427b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (287 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'affiliatemarketingprograms.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agifunding.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arbitrageurly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caelin.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eadtmoney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getconnectedct.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'houstontxkitchenremodeling.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kinesiology.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'massageguys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'okanogan.cam'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'palmbeachliberty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rawnewslive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spend100.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'summercampsanantonio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vovini.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d4762d191000004030046304402200ab14f0b2db728509b704efd8516b269a64c5147c3d206186c1adb1e32e20b6502204d52ea2d027145f6b2618dcd5caef99909a8e6cfa2393c81bd491b949ba8d5fc00770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018d4762d1f40000040300483046022100b666c7dc698ca2f0fbb735e2e1837114654482dbedebfe8680ee96b1762c2227022100bdc7a3102a8f73c87ca637e098b0e597a8a3581682f370982a8ef707e4197af1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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