allaboutltc.org

Issued by R3

About this certificate

This digital certificate with serial number 03:35:dd:02:0f:cb:02:07:b5:54:de:89:71:50:29:0c:bc:17 was issued on by Let's Encrypt.

With 14 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=allaboutltc.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:35:dd:02:0f:cb:02:07:b5:54:de:89:71:50:29:0c:bc:17
Serial Number (int): 279665593334072751314982543380170895309847
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 8e:a3:00:cc:20:68:23:d9:b5:35:f0:9b:f0:8f:86:2a:18:51:a2:d9
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): c6:e2:51:15:f3:c0:4e:82:d2:6a:d1:80:0e:10:81:95:02:1c:18:8c
Fingerprint (sha256): d6:4f:60:ed:0a:e9:df:ca:4a:05:e4:f4:56:c0:11:89:bf:6c:27:89:06:0b:f9:96:e7:f4:e9:09:28:b0:5d:f8

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate allaboutltc.org

14

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for allaboutltc.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

allaboutltc.org
champagne4vip.com
chillerapp.com
ctrlpew.org
essentialtechnology.com
lantf.com
marchele.com
melenadelsur.com
pvglam.com
reproduce.in
srebroinwestycyjne.com
tadida.com
thehousepainters.org
yieldarbitragefund.com

Other certificates including the domain name allaboutltc.org

(limited to 100 certificates)
syllabus.marketing
starband.ca
goldenoldies.ca
starband.ca
starband.ca
allaboutltc.org
allaboutltc.org
allaboutltc.org
tksimplex.cc
fifa.fund
starband.ca
register.cubscoutpack136.org
allaboutltc.org
allaboutltc.org
starband.ca
allaboutltc.org
allaboutltc.org
kiesza.ca
worldofwellness.life
allaboutltc.org
starband.ca
sanus.world
allaboutltc.org
allaboutltc.org
starband.ca
starband.ca
starband.ca
erin-gee.media
parcel2go.co.za
allaboutltc.org
starband.ca
starband.ca

Certificate

The complete raw certificate details for allaboutltc.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA31T+iL/mL1f8jEwXgvvL
vmaSailKZEClK81zSXmkFFKzUv0vTe7W/8xJKEQjFasWOIh3R7FTTyfqYQ+FCZmD
L5xTJKVr9REkxZjxSPWC3uAmxNfUJ/SsX+hMBJoMQ3AhHj9lguGna26N1cib3Zsv
H6MDf4Z2lDp6e7l/JJ00ARdXiEvd1XrAK61gcC3g6PYw7AGz+X9mQpyFWngdDvcT
5jWiCCLYs04PbsHp8GpEM6hW5a3RW10IZGudBdI13Seui2yHjVCau5D0iRcd9YJO
S+bZfPvJJKS/glpAaWtrp0VsrEp+fadnus+q6EWf4TxGfK9dk1HppV8h6OGzwfgT
wwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 279665593334072751314982543380170895309847
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-18 13:44:31 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-18 13:44:30 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'allaboutltc.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28193054246096776473935490127307468752381920583347946423634951038150918854751350236352510331230736492084287200750048655858779371674928161890607231378044199907094036917209241027397233521041903450445572023277206214721783480451065681633257652300536890402203067395762750405865323537511263626327823112464256330029324284934848808915449087893879406026009958475632298088011909885919165026486987538726061792136169180785426141377818830044840438228451905165591369917945625230892037498227720169624975539396662541940461845793859067265081745903587945334652128871844978072374720747885019327069680744460073503852839263046202939675587
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8ea300cc206823d9b535f09bf08f862a1851a2d9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allaboutltc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'champagne4vip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chillerapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ctrlpew.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'essentialtechnology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lantf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marchele.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'melenadelsur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pvglam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reproduce.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'srebroinwestycyjne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tadida.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thehousepainters.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yieldarbitragefund.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018dbcad041b0000040300463044022046bf96b5516d825e13e928abec5695465f4dad2c79bb981fc68abb8ceae6f9f202203002295cf339b1f0309f19068e0daf4ca444abf9c9dfc258787ba2f6ff2081bc007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018dbcad05f20000040300483046022100e4b844b13425943f494a0e568d2ebecf23146ba5c063bacf6766605451a65ecd022100890fa62ed98f3d66e205eb49ee46776d1afae9775015fe23c1f316cf9ea8751c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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