pledgeforlife.com

Issued by R3

About this certificate

This digital certificate with serial number 03:f8:83:22:0f:18:0d:42:0a:22:ab:b2:2c:59:87:62:de:58 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=pledgeforlife.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f8:83:22:0f:18:0d:42:0a:22:ab:b2:2c:59:87:62:de:58
Serial Number (int): 345901190503356216139490768552413150502488
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 95:8b:95:ca:2a:be:da:f5:00:b6:54:a9:d4:ae:74:bb:b0:d1:ab:e5
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 5d:40:5c:e8:15:53:63:fa:2e:ad:ad:45:5e:3f:13:9e:ce:62:a7:42
Fingerprint (sha256): d2:1e:61:11:06:75:01:94:45:b4:fc:4e:5b:ef:91:06:e7:29:c0:48:d5:cb:d6:f8:d1:33:2f:49:3c:5d:ea:c4

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate pledgeforlife.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for pledgeforlife.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

pledgeforlife.com
www.pledgeforlife.com

Other certificates including the domain name pledgeforlife.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for pledgeforlife.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 345901190503356216139490768552413150502488
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-24 21:13:47 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-22 21:13:46 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pledgeforlife.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 663148318001480411245809034871655619472639856675099850681451161262117960760272242226120096524245772313957480684575318310308234574325389191024012848753642117456663208373030853857373853354270581720669985617399936349903379757535441715972341773824705815299154709804553358585537892047687383168667820951056143482056592034299758202943964477020207073415022994770039736818142504123779417066686818767675604651108221199330566917188918274401084366477468818242439560719646557697490646726745087769980278881457984667801136183606807724263549074327321772184629064314938662949623340780333847056590136718440442137942828156983356309914571650236325741741992033613934266611913469728758865636347880682111742322124429955461021676386745618372143086181338644755465315880358081257387626872314320396664122325487671908457793945331037165380426928343229815074219228673677100165245922235855327692383489823832190333530417553542163161453666393302180742259832423671872007244492557132330240162933492396290894046712106543038324740001700120384902758934851693257312653929436175657117483194705304450536269193824527754467063355702032526746270360415159594081943689253010515946893374976085135556297315371305587800711128942962640485926607498845095687731763422021159990762373699
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							958b95ca2abedaf500b654a9d4ae74bbb0d1abe5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pledgeforlife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pledgeforlife.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000188ef786dbd0000040300483046022100de19ef7fbd1b13ddd1bf5e37df9703a738a5f38ebf940c876ac30dec4cdef37f022100bb2e4d096e89a457e6a56cde17fb9423675c52999a911070d903f3134b0b2fd80076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000188ef786dcb0000040300473045022100fdb95cb9f1b3731922d1b2bf2b67400a6bf8ec7ab062f9d7aa4f1aec632dced60220716e9f399b50650fdaab4f3f6938cf30b4bc8eab9a99761340c9bda12f03d189
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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