centralpafoodbank.org

Issued by R3

About this certificate

This digital certificate with serial number 03:7c:63:95:6e:7a:77:83:ad:9e:6c:ff:8e:01:da:6a:ac:9b was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=centralpafoodbank.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:7c:63:95:6e:7a:77:83:ad:9e:6c:ff:8e:01:da:6a:ac:9b
Serial Number (int): 303664240758059617903831224424776690478235
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ac:8d:d5:ba:79:c2:d3:d6:06:10:35:1b:2f:04:bc:b7:85:f5:f3:1f
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): e4:dd:7a:e2:19:9b:9b:40:26:2e:55:ce:3a:d9:fe:c5:38:0c:dd:fc
Fingerprint (sha256): d7:f7:b4:bd:12:e6:6d:6f:a9:c7:3f:e0:2d:3d:49:d0:fb:e3:33:81:5e:2c:b3:d2:d6:ea:fa:b5:c8:16:0a:bf

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate centralpafoodbank.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for centralpafoodbank.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

centralpafoodbank.org

Other certificates including the domain name centralpafoodbank.org

(limited to 100 certificates)
www.centralpafoodbank.org
remote.centralpafoodbank.org
centralpafoodbank.org
centralpafoodbank.org
centralpafoodbank.org
www.centralpafoodbank.org
centralpafoodbank.org
centralpafoodbank.org
www.centralpafoodbank.org
centralpafoodbank.org
remote.centralpafoodbank.org
centralpafoodbank.org
centralpafoodbank.org
centralpafoodbank.org
remote.centralpafoodbank.org
rds.centralpafoodbank.org
centralpafoodbank.org
centralpafoodbank.org
centralpafoodbank.org
www.centralpafoodbank.org
centralpafoodbank.org
www.centralpafoodbank.org
remote.centralpafoodbank.org
centralpafoodbank.org
www.centralpafoodbank.org
esm.centralpafoodbank.org
centralpafoodbank.org
www.centralpafoodbank.org
remote.centralpafoodbank.org
www.centralpafoodbank.org
volunteer.centralpafoodbank.org
centralpafoodbank.org
centralpafoodbank.org
centralpafoodbank.org
esm.centralpafoodbank.org
www.centralpafoodbank.org
centralpafoodbank.org
centralpafoodbank.org

Certificate

The complete raw certificate details for centralpafoodbank.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqFEHVwCUUpSv28gBk50
BjezrdjW/OKZx5WDi73RfR0pLFki9fBnuaDiBQt9z8KyZDuvh4ghfS7lLM/TdSQM
Qp1l4P+7VTYDGxsB1AdzUttGmXFfIr/MdnaWn+zpw7O56LuQgilqQnmOeBYoszyi
3pso5rrWicjlSzcfTD5uP5EMNHol08ZwDSqB9EigX9dClJg3Y68hbLVn/oQXtGl6
IaooK3l2q9BnY+ekY6MzhKh1n0ZQmjFev2lev0Bd56/YPepkV+aDToFP8eJsAzRc
1pbXprU+QdsOyTcRhxc9/ObXOK3QMZPaDzr3wavC67nAaldLNyW6AKMa1rtSu4tH
MQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 303664240758059617903831224424776690478235
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-26 19:24:06 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-24 19:24:05 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'centralpafoodbank.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21540035108693521755564771753268129915991912144845473434298944165125357994294166567422167001123119116641431953323948338979536803890295217416823309404882427101227137423308383441012127494045289995183511295214037972626293798900106927862509784476330652978360743597490900291429308339006449173175295782397264651196777372707524463688246134651461877820772549975080623539965562695927693172037134113508171589829922544532222215784247342162774499998224206207178642597529965770320362700506687737153308504275826880480362703096575858701405621319652309170100440757005945321754614701007549785113869775103428018339364673376087932880689
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ac8dd5ba79c2d3d60610351b2f04bcb785f5f31f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centralpafoodbank.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (239 bytes)
							00ed00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c0d4db9e00000040300463044022014bf811460c200f33fe181701bc7559f5d92acd20b012f117572fc60a7833b4902203da982c803e952aee24852ddac505fbc9096e4e54879930d64d6543fa2601ced00740076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018c0d4dba2a0000040300453043021f1b9e1cb30c925ea13da269d606a9e0646ea3f47a0675de4ef9565b1aca39b4022005dd1eb38518b1b02b2eb1dbf3b254681beb4e6a310118cade01fe795b97cf59
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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