republicanphotographer.org
Issued by R3
About this certificate
This digital certificate with serial number 03:96:a4:f9:dc:2b:60:ff:d7:e4:26:df:4d:37:40:72:25:74 was issued on by Let's Encrypt.
With 18 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=republicanphotographer.org
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:96:a4:f9:dc:2b:60:ff:d7:e4:26:df:4d:37:40:72:25:74Serial Number (int): 312598503572214954482638781223962418488692
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: f5:6a:56:34:3b:2f:9b:00:c0:29:24:ab:87:2f:77:75:bd:af:0e:fb
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): fb:b5:b6:45:8b:d2:73:87:5c:b3:15:85:7e:bb:9e:52:47:68:39:75
Fingerprint (sha256): d1:9b:68:77:a5:e4:66:5a:1d:98:f3:32:5d:a8:d0:0b:3d:c3:57:ba:c2:73:ef:16:be:99:5a:4b:a0:a6:65:fc
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate republicanphotographer.org
18
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for republicanphotographer.org
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
atlantahomeimprovements.com
christianschoolday.com
christmaslightquote.com
dyvergpublishing.net
ecuadorianrainforest.com
enterdragon.com
ghungroo.in
googlecrooks.com
healingunited.today
law-library.com
linkedin.taegan.net
ostomycentre.com
profound-strategy.net
quitevisiblestudio.com
republicanphotographer.org
rxsugarfiberplus.com
studiofit.in
usaexpo.com
christianschoolday.com
christmaslightquote.com
dyvergpublishing.net
ecuadorianrainforest.com
enterdragon.com
ghungroo.in
googlecrooks.com
healingunited.today
law-library.com
linkedin.taegan.net
ostomycentre.com
profound-strategy.net
quitevisiblestudio.com
republicanphotographer.org
rxsugarfiberplus.com
studiofit.in
usaexpo.com
Other certificates including the domain name republicanphotographer.org
(limited to 100 certificates)
Certificate
The complete raw certificate details for republicanphotographer.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGYTCCBUmgAwIBAgISA5ak+dwrYP/X5CbfTTdAciV0MA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDAyMTgxNDU1NTVaFw0yNDA1MTgxNDU1NTRaMCUxIzAhBgNVBAMT GnJlcHVibGljYW5waG90b2dyYXBoZXIub3JnMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEApjovbGxdQaUoG56ebkdF7DFlPh64YhOmuNjZ5T1J0UEsFzla YgdeAdG3oYwmfWL8MSXYKRSZDW8HgKRXDQdfPYH9i68eTSsrSeEK3JlrTiFz+08w g6hXy0Qwj27/A9lZD+q0teLOi9jo3Ljtiww6FZ13dZ1AxyvItJFWLFOXBIYEt9iB 1raIjQPEsvsGyJK3jp+kzsXcAAQKPh7RSVKKlDTKZ613ykD3jUSAyLZfmZQgnHHt 3wIpLhvyXnDFX3cQqHmZJtno2fdMQ0CRzGrKcote1h95KWl1uFuUxXXpay1eEBW+ FzlDAQ3Ft24N5e2JKEogjKE1tyZPkVZnpUxmawIDAQABo4IDfDCCA3gwDgYDVR0P AQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMB Af8EAjAAMB0GA1UdDgQWBBT1alY0Oy+bAMApJKuHL3d1va8O+zAfBgNVHSMEGDAW gBQULrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUH MAGGFWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3Iz LmkubGVuY3Iub3JnLzCCAYQGA1UdEQSCAXswggF3ghthdGxhbnRhaG9tZWltcHJv dmVtZW50cy5jb22CFmNocmlzdGlhbnNjaG9vbGRheS5jb22CF2NocmlzdG1hc2xp Z2h0cXVvdGUuY29tghRkeXZlcmdwdWJsaXNoaW5nLm5ldIIYZWN1YWRvcmlhbnJh aW5mb3Jlc3QuY29tgg9lbnRlcmRyYWdvbi5jb22CC2dodW5ncm9vLmlughBnb29n bGVjcm9va3MuY29tghNoZWFsaW5ndW5pdGVkLnRvZGF5gg9sYXctbGlicmFyeS5j b22CE2xpbmtlZGluLnRhZWdhbi5uZXSCEG9zdG9teWNlbnRyZS5jb22CFXByb2Zv dW5kLXN0cmF0ZWd5Lm5ldIIWcXVpdGV2aXNpYmxlc3R1ZGlvLmNvbYIacmVwdWJs aWNhbnBob3RvZ3JhcGhlci5vcmeCFHJ4c3VnYXJmaWJlcnBsdXMuY29tggxzdHVk aW9maXQuaW6CC3VzYWV4cG8uY29tMBMGA1UdIAQMMAowCAYGZ4EMAQIBMIIBAwYK KwYBBAHWeQIEAgSB9ASB8QDvAHUAouK/1h7eLy8HoNZObTen3GVDsMa1LqLat4r4 mm31F9gAAAGNvO5ilwAABAMARjBEAiAYIAoVFgbdUWN5CEgrV7dKMK3PpSzC84dr 1w9MyIH0sgIgP7FmTtosGkKvUezI23XzfINTNw6HerFMq/sHjJ8udOEAdgB2/4g/ Crb7lVHCYcz1h7o0tKTNuyncaEIKn+ZnTFo6dAAAAY287mLdAAAEAwBHMEUCIF3t EOmmuZd8BD8W4K40ksUs9cv7QC52c86SQoVdfgQ6AiEA50nFp/S1eAqH/jv5bsg9 hr3/oB/R87bf0Px8PvomNRUwDQYJKoZIhvcNAQELBQADggEBADxMDAm3w/t1J4K+ h78rsR/njQ19uHUZ73KvmXluV2G+awj7097uOXOce8ltU2b7lHI7X9wLBiDjGzu9 ofCO/kksIDDqkPhDBNeExBd83pYXSgBXq1MGB7Z6G6PpKQLN+zMDuH2pHM3sCuGm v37USV1+GAOjK7pYCsQRl6aCpLMftlvp6tRxDuQq0+EyrqRHBmmZUEIjBFyCVpql u1CTS93EDqKJdAOt1vltlX2DimF9RTGBrRVvMcU90RjLf4IBhbW3qyLZo9XFkipZ aeOOrdwqghldDH7Wp/8fzOx9NpuHC7KjLhGa9DGrcV/rXbHwaRRgqsVw4etIKQmj 0VOQajM= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApjovbGxdQaUoG56ebkdF 7DFlPh64YhOmuNjZ5T1J0UEsFzlaYgdeAdG3oYwmfWL8MSXYKRSZDW8HgKRXDQdf PYH9i68eTSsrSeEK3JlrTiFz+08wg6hXy0Qwj27/A9lZD+q0teLOi9jo3Ljtiww6 FZ13dZ1AxyvItJFWLFOXBIYEt9iB1raIjQPEsvsGyJK3jp+kzsXcAAQKPh7RSVKK lDTKZ613ykD3jUSAyLZfmZQgnHHt3wIpLhvyXnDFX3cQqHmZJtno2fdMQ0CRzGrK cote1h95KWl1uFuUxXXpay1eEBW+FzlDAQ3Ft24N5e2JKEogjKE1tyZPkVZnpUxm awIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 312598503572214954482638781223962418488692 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-18 14:55:55 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-18 14:55:54 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'republicanphotographer.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20984250839606062785183620102456061972069567129120108219415311001253124394276078132153936414123179218874555141856183864975551063667268842759628483073120636100666970137217135478270130117035385061189088211369728767234652783284118253183207083411671146159276527304138940551576511615923838401517384492513313538716959825198376510931270647954277223985789558132362999622654892437907730537351500235888431269390152509226385285243674114458206292903807358686703407694406580896461949956897474318066100807639391737970850814791557163577651135932594815020334545635992710649984208079230157166383504270290053687254126456394566947595883 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) f56a56343b2f9b00c02924ab872f7775bdaf0efb . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (379 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atlantahomeimprovements.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'christianschoolday.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'christmaslightquote.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dyvergpublishing.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecuadorianrainforest.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enterdragon.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ghungroo.in' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'googlecrooks.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healingunited.today' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'law-library.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'linkedin.taegan.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ostomycentre.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'profound-strategy.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quitevisiblestudio.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'republicanphotographer.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rxsugarfiberplus.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'studiofit.in' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usaexpo.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007500a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018dbcee62970000040300463044022018200a151606dd51637908482b57b74a30adcfa52cc2f3876bd70f4cc881f4b202203fb1664eda2c1a42af51ecc8db75f37c8353370e877ab14cabfb078c9f2e74e100760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018dbcee62dd000004030047304502205ded10e9a6b9977c043f16e0ae3492c52cf5cbfb402e7673ce9242855d7e043a022100e749c5a7f4b5780a87fe3bf96ec83d86bdffa01fd1f3b6dfd0fc7c3efa263515 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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