reginaangelorumpress.org

Issued by R3

About this certificate

This digital certificate with serial number 04:48:9d:41:51:13:48:b4:a1:1e:3f:e7:92:57:ec:4b:82:35 was issued on by Let's Encrypt.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=reginaangelorumpress.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:48:9d:41:51:13:48:b4:a1:1e:3f:e7:92:57:ec:4b:82:35
Serial Number (int): 373158502084385606783470327042422193488437
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 28:61:91:9d:e8:06:ed:89:d3:99:9d:ac:a7:59:f5:ff:15:50:7e:5c
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 39:db:a5:1b:72:92:5e:a3:f9:ab:cb:1c:51:9a:3e:b0:1f:c4:4d:1e
Fingerprint (sha256): d8:7d:89:7e:be:eb:b5:65:2c:a5:2e:fc:15:ac:9a:33:66:c4:46:2f:0a:1b:5e:6f:e6:7c:02:1c:e8:3e:4f:eb

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate reginaangelorumpress.org

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for reginaangelorumpress.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

canibuild.shop
djibouti.biz
esloa.com
productreviewpages.com
reginaangelorumpress.org

Other certificates including the domain name reginaangelorumpress.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for reginaangelorumpress.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgISBEidQVETSLShHj/nklfsS4I1MA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDAxMjcwNjU1MDJaFw0yNDA0MjYwNjU1MDFaMCMxITAfBgNVBAMT
GHJlZ2luYWFuZ2Vsb3J1bXByZXNzLm9yZzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAOON6WWSd1PAwpCwfvxVDSwEZKZDxMz5enhe2ivFwS3XlLvvhrg8
q3Xg4iz/9D1PG8fIH0PXrUJ0A0Bbra4Am4HHAtTMnrjNTxcFYbUyXwYnVSKVlSCd
I43GPhdLk3oVQivdO8oRLDbItkdSkaNOPoWm2rv/KtyXfQ4cLnuoKo5TnE9UXxHQ
Pk3rwpEYT4INrb9s1PpPsVk2KzQNQgmF2GZl2uGPmJOllplG1JDv9/HRITTvLuZU
FuNKB6cq5w2HuOhfJxsrnnvhbJZ4Z6ODHGu7Ddsfc77JLQkYVOzDd6ab2ngxk/d2
ILaytFfwunnZlybqRPhYf4hiTUjgZhfZdEkCAwEAAaOCAlkwggJVMA4GA1UdDwEB
/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/
BAIwADAdBgNVHQ4EFgQUKGGRnegG7YnTmZ2sp1n1/xVQflwwHwYDVR0jBBgwFoAU
FC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzAB
hhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5p
LmxlbmNyLm9yZy8wZAYDVR0RBF0wW4IOY2FuaWJ1aWxkLnNob3CCDGRqaWJvdXRp
LmJpeoIJZXNsb2EuY29tghZwcm9kdWN0cmV2aWV3cGFnZXMuY29tghhyZWdpbmFh
bmdlbG9ydW1wcmVzcy5vcmcwEwYDVR0gBAwwCjAIBgZngQwBAgEwggECBgorBgEE
AdZ5AgQCBIHzBIHwAO4AdQBIsONr2qZHNA/lagL6nTDrHFIBy1bdLIHZu7+rOdiE
cwAAAY1J6je5AAAEAwBGMEQCIBTcAwuIp9gtYFFzef5vSZxGUR2LoFNd768zagDp
FFC2AiA/N6wpp4oeXOj4+z5wsqo2THqI8GSTZzHGDkgT6rypLAB1ADtTd3U+LbmA
ToswWwb+QDtn2E/D9Me9AA0tcm/h+tQXAAABjUnqN70AAAQDAEYwRAIgLd1frrDN
aIpm32RcP6W3nBREB9ty/qWe0atCdq0jhGQCIC5hZusD4hREcj6pnm0UHW2TE4f+
YjT2TB9D+esdXWq7MA0GCSqGSIb3DQEBCwUAA4IBAQAld4jpwETkm/Voe6XoyY/m
EjNLcCwHnuZiGmlRKpgBec8Q6JHlzfWmH8nkuha5NRYKbLUdbNeUL5WA/8XBc1ay
YFJpZBtwTyxGO/lmLkOj/hCkPDjNDbRP02lbYZZxDXXf8qx/JMv583s4YuTc5RRz
ZNTuRhwmz1mrQQ3mZkUXP+aZDswYDkAZnYLDf2s/k7ced3honQmHZiHFkQ1rFKY7
gF0IcbE6/73rJeOksV4DxyZ5IuI26mXcfNcmpyRjaZB2qhU/gfN7qUAxqn6UgMoZ
hJCTLFeKdS15Xw789f9GR3/raMtQgEXxNJ5OWoXyrhqQZM3DS53V8LgL6zRrRB5e
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA443pZZJ3U8DCkLB+/FUN
LARkpkPEzPl6eF7aK8XBLdeUu++GuDyrdeDiLP/0PU8bx8gfQ9etQnQDQFutrgCb
gccC1MyeuM1PFwVhtTJfBidVIpWVIJ0jjcY+F0uTehVCK907yhEsNsi2R1KRo04+
habau/8q3Jd9Dhwue6gqjlOcT1RfEdA+TevCkRhPgg2tv2zU+k+xWTYrNA1CCYXY
ZmXa4Y+Yk6WWmUbUkO/38dEhNO8u5lQW40oHpyrnDYe46F8nGyuee+Fslnhno4Mc
a7sN2x9zvsktCRhU7MN3ppvaeDGT93YgtrK0V/C6edmXJupE+Fh/iGJNSOBmF9l0
SQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 373158502084385606783470327042422193488437
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-27 06:55:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-26 06:55:01 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'reginaangelorumpress.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28726074497745100334034683911970713491719678407546580301827926493361947076985828533904061348577107379458637859640272651483535933870766451550851361372648879739696321521414119233315924986818013337731807248055209809970816221054940789296106119412450250293262629013211817066165675881881545096363462327079490715765838556365638642706638071148771629796600411233266426730983170895896502648045054864338987343233406651137399857109479856142852360451578215552621802360578541359105582071012933899021840355484542754517653685481458097336956506724042237318000779148891531799996519699384636255678107136469775158660081553364656781358153
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2861919de806ed89d3999daca759f5ff15507e5c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (93 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canibuild.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'djibouti.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esloa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'productreviewpages.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reginaangelorumpress.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d49ea37b90000040300463044022014dc030b88a7d82d60517379fe6f499c46511d8ba0535defaf336a00e91450b602203f37ac29a78a1e5ce8f8fb3e70b2aa364c7a88f064936731c60e4813eabca92c0075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018d49ea37bd000004030046304402202ddd5faeb0cd688a66df645c3fa5b79c144407db72fea59ed1ab4276ad23846402202e6166eb03e21444723ea99e6d141d6d931387fe6234f64c1f43f9eb1d5d6abb
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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