logicandcompassion.org

Issued by R3

About this certificate

This digital certificate with serial number 04:c3:1f:bb:4a:a8:3c:ed:e8:bd:e2:78:33:d5:cf:24:5c:72 was issued on by Let's Encrypt.

With 14 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=logicandcompassion.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:c3:1f:bb:4a:a8:3c:ed:e8:bd:e2:78:33:d5:cf:24:5c:72
Serial Number (int): 414846383818233364054400526645989543795826
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: d9:69:4a:70:2f:92:eb:7b:81:1c:9a:6b:69:99:6c:d1:fb:93:c8:6f
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): df:e1:78:b0:b2:64:88:45:47:ba:7b:fc:3f:d8:07:4e:22:25:43:ad
Fingerprint (sha256): d4:f6:f9:ef:45:c7:5e:21:6b:fc:32:7c:66:46:38:09:87:2c:b7:76:ee:ce:0a:5e:6f:49:9b:9d:2b:f9:81:e0

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate logicandcompassion.org

14

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for logicandcompassion.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

1on1leadership.com
dsub9.net
enerpactoolsgroup.com.au
familycounselling.co
firstbornsaints.com
gogreensouthcarolina.com
logicandcompassion.org
masterp4.com
moviceutica.com
ozarkcounty.com
roysgate.com
rxdpp-iv.com
toddcole.photos
ultrasonicproduct.com

Other certificates including the domain name logicandcompassion.org

(limited to 100 certificates)
arbitragers.ca
logicandcompassion.org
www.ateliernovako.ca
codyarmstrong.org
membership.cdnsoilex.ca
logicandcompassion.org
logicandcompassion.org
logicandcompassion.org
jagdambe.org
logicandcompassion.org
logicandcompassion.org
logicandcompassion.org
soil.ca
explorerlabible.ca
membership.cdnsoilex.ca
emotionsandmore.limited.ketogeniccertified.org
plasmatv.co.za

Certificate

The complete raw certificate details for logicandcompassion.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtaPA8kErBRgE5ruTO0gt
8PejVsUlHPolgZADpbnnoIdKdvw4xSGhvrZMH1K/RPyXN7jNxYHWfEiwYtGLRBgI
/NVN8wVZqA1MKJNoSsVF6iKS7DCTU3kc7xBeZ6UjO1OGMsI9X7tioHoabXI5c2px
0J1/7HuZE2l1nKLbNbsbcvUrMoJQsySHDwrfVgqaEE1aCyHoLLvIeBm91UQJtsVb
N0+yxNRYKPfghUhcSTEyyBluhleIfX6B7GuNPAQ+6ompBttSFJUbt6U/KO85javZ
iCj07ZpZ4E8DJiqCJuRf/+02B5+hW5u9o0UQqODLyV0Kg4PgFknsxaclvq0YZulL
LwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 414846383818233364054400526645989543795826
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-25 22:37:47 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-24 22:37:46 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'logicandcompassion.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22929883156198443783242884388205436435817486700844166201089918988300073421068787219749426351656509875409254891050262927884443560896481690068178793446475492202970877473163356897032821192007582753529883177374268312341514690885794186308619503035359697883709671300782308526973447958443210119422367500310575717020992488795142709758984172536272749568827788240023565400208745531910520736500572324340363287876318513725375759533316655708393815039932186027420124136206376452714967312811459593345289951876891109455336207379456217189283046686705641673456613952009866785204659489304862412981972262798976865491701630464176639527727
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d9694a702f92eb7b811c9a6b69996cd1fb93c86f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (270 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1on1leadership.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dsub9.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enerpactoolsgroup.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'familycounselling.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firstbornsaints.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gogreensouthcarolina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'logicandcompassion.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'masterp4.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moviceutica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ozarkcounty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roysgate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rxdpp-iv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toddcole.photos'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ultrasonicproduct.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018d42fc9c0a0000040300483046022100bb10af7cbf2f2fdf0ec0f6947f8c3e98a7c3a7d03eb2b325a6fc471af2631f42022100eb4cb1f4c1605513a413fbf4f8a653e5a88468badc51169b88bf9661f34ad73500750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d42fc9dff0000040300463044022078a83006586f384ffa37c455540a0cbd457001809f24dc2bec7ddac11d99180702205b9cdb328027c98e52712cd980335421626f687e33a2f764b046484011170916
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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