lifebeginsatconception.org
Issued by R3
About this certificate
This digital certificate with serial number 03:ab:a8:84:1b:1b:ce:cc:ca:6e:23:2e:12:84:a1:e4:52:d8 was issued on by Let's Encrypt.
With 13 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=lifebeginsatconception.org
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:ab:a8:84:1b:1b:ce:cc:ca:6e:23:2e:12:84:a1:e4:52:d8Serial Number (int): 319749138775066630831323905391960822928088
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 9e:a9:10:be:c2:6f:ce:4b:af:ef:c6:b7:3d:87:93:8a:90:92:d3:8b
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): b4:ec:79:73:7b:20:d4:91:fc:e2:20:08:e4:a1:2b:ea:fb:35:54:47
Fingerprint (sha256): e0:97:ab:d9:ef:13:26:db:7f:b3:86:81:6b:9f:ca:61:e6:f1:c3:83:57:6c:6c:e5:d8:b7:0c:29:f6:9c:8f:0c
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate lifebeginsatconception.org
13
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for lifebeginsatconception.org
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
300.cool
800for.com.instantize.com
allie.design
blocking.com
brazilianfantasy.com.jaimejacob.pt
civex.com.dcpig.com
journalcreation.com.nurologic.com
lifebeginsatconception.org
playgroundcase.net
sahealthandfitness.com
schnauz.com
showforvip.com
spicytechnologies.net
800for.com.instantize.com
allie.design
blocking.com
brazilianfantasy.com.jaimejacob.pt
civex.com.dcpig.com
journalcreation.com.nurologic.com
lifebeginsatconception.org
playgroundcase.net
sahealthandfitness.com
schnauz.com
showforvip.com
spicytechnologies.net
Other certificates including the domain name lifebeginsatconception.org
(limited to 100 certificates)
discord.hacker.rehab
sex-video.co.za
www.lifebeginsatconception.org
hempmedicine.org
lifebeginsatconception.org
lifebeginsatconception.org
nix.vc
faqtruth.org
variant.vc
lifebeginsatconception.org
arbitrage.id
lastortillas.ca
wodu.ca
cryptos.ec
fatherflanaganinstitute.org
lifebeginsatconception.org
nailedpromise.org
lifebeginsatconception.org
townscounty.com.debts.live
bakhtos.one
sex-video.co.za
www.lifebeginsatconception.org
hempmedicine.org
lifebeginsatconception.org
lifebeginsatconception.org
nix.vc
faqtruth.org
variant.vc
lifebeginsatconception.org
arbitrage.id
lastortillas.ca
wodu.ca
cryptos.ec
fatherflanaganinstitute.org
lifebeginsatconception.org
nailedpromise.org
lifebeginsatconception.org
townscounty.com.debts.live
bakhtos.one
Certificate
The complete raw certificate details for lifebeginsatconception.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGBDCCBOygAwIBAgISA6uohBsbzszKbiMuEoSh5FLYMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzA5MjAxMzE2MDhaFw0yMzEyMTkxMzE2MDdaMCUxIzAhBgNVBAMT GmxpZmViZWdpbnNhdGNvbmNlcHRpb24ub3JnMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAwiTSNeiv7L6LGgVXjFG6fbM0a8ECvxJqFrDLbY6Fjs/Mq5IO sqvBmhXJCyjo+lvYpU+G9xQiV05fCO/dut9k20F1r3H42Ew+d927y/xH2at6R7JC I6vuY6hRwmV806STJjHATEu5z8a3ZbxPNZyoGzuohkDRHnFwkde/SaM4zSgZUr1J 3EeyZNEpZNwdbJFqlkY55Z2Eiw6Ga4Wj4n5vPB/2CQclWGHALvVXIdAN9xMriJ6U TO29PccNbWqrNJLrMqeJs8vw/n8ibHlGNFOQBKrPlt5QN+x1ZAsx8Oj9VstMn0fi 1DHv5qKOOM22V+2HxJ5o/YTBtrk2Fid8/WjMcQIDAQABo4IDHzCCAxswDgYDVR0P AQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMB Af8EAjAAMB0GA1UdDgQWBBSeqRC+wm/OS6/vxrc9h5OKkJLTizAfBgNVHSMEGDAW gBQULrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUH MAGGFWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3Iz LmkubGVuY3Iub3JnLzCCASYGA1UdEQSCAR0wggEZgggzMDAuY29vbIIZODAwZm9y LmNvbS5pbnN0YW50aXplLmNvbYIMYWxsaWUuZGVzaWduggxibG9ja2luZy5jb22C ImJyYXppbGlhbmZhbnRhc3kuY29tLmphaW1lamFjb2IucHSCE2NpdmV4LmNvbS5k Y3BpZy5jb22CIWpvdXJuYWxjcmVhdGlvbi5jb20ubnVyb2xvZ2ljLmNvbYIabGlm ZWJlZ2luc2F0Y29uY2VwdGlvbi5vcmeCEnBsYXlncm91bmRjYXNlLm5ldIIWc2Fo ZWFsdGhhbmRmaXRuZXNzLmNvbYILc2NobmF1ei5jb22CDnNob3dmb3J2aXAuY29t ghVzcGljeXRlY2hub2xvZ2llcy5uZXQwEwYDVR0gBAwwCjAIBgZngQwBAgEwggEE BgorBgEEAdZ5AgQCBIH1BIHyAPAAdQB6MoxU2LcttiDqOOBSHumEFnAyE4VNO9Ir wTpXo1LrUgAAAYqy8sOSAAAEAwBGMEQCICJqi4GCKQ43IWp8AIEEbsXOXlAOMFDm XAxTabbrBf+uAiBl6/Kf6mP7RLgURXtgTSsb0G3AL19vetYi5N919rzwHgB3AOg+ 0No+9QY1MudXKLyJa8kD08vREWvs62nhd31tBr1uAAABirLyw4UAAAQDAEgwRgIh AI9BLBjdBakc9VN73oIfdWikHaOHB6vtmAs21tfk17wCAiEAzWV9i5Kja52F+tv9 eGeZRvj3ZDmcKzyP2MNSHDnoHwUwDQYJKoZIhvcNAQELBQADggEBAFPsA7Jg/hhp +EYw4VGZDg9pXS5rVrl4DmxeJcNdBW6HvReClu6hlTjLfITUGCq3aPnMzA8TD7cW BPgXYFP4g5Q5q/m3S8s6AqcyG1QqDuhOQttoNb29SXZWgM9b52l+zRTr1LhLTbND iYCYb/nFwXRmixL9lPnFhP3CwCxRW5X0ZZDsOPQ1uzUhjUSrYsAht6V858HCYgHR Ml+MTz97II6tsUHB+A6cTeH6FBs5jthet4ZkRTgaxjeKSBrLZNu6Xv49/Siy79jH 3+enJ6Msjbuym1vamY0jjkIjPsIzm5sMHUjAewsOEqRA6Dz13IEAXXJoIaeaj1LJ sqiT170sCyM= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwiTSNeiv7L6LGgVXjFG6 fbM0a8ECvxJqFrDLbY6Fjs/Mq5IOsqvBmhXJCyjo+lvYpU+G9xQiV05fCO/dut9k 20F1r3H42Ew+d927y/xH2at6R7JCI6vuY6hRwmV806STJjHATEu5z8a3ZbxPNZyo GzuohkDRHnFwkde/SaM4zSgZUr1J3EeyZNEpZNwdbJFqlkY55Z2Eiw6Ga4Wj4n5v PB/2CQclWGHALvVXIdAN9xMriJ6UTO29PccNbWqrNJLrMqeJs8vw/n8ibHlGNFOQ BKrPlt5QN+x1ZAsx8Oj9VstMn0fi1DHv5qKOOM22V+2HxJ5o/YTBtrk2Fid8/WjM cQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 319749138775066630831323905391960822928088 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-20 13:16:08 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-19 13:16:07 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lifebeginsatconception.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24508388341853122977893654652393417229126623905336716295060894301207633694435522744148069401714764617038100049405287989309585362229970249524263964936831328214062820887156510440344514273507753473850128694490873782707729168741539011204361056844449647044849585487670497401042859331902635823617338711606716540279095473423328114612341505470388103270487250257778549421007525880567211658848278009271512556907598747552900306231288050859976271001632722981022689921790522208617912150214835701430442403105037890604348093668248002938912605846317586223361049697082314200756796541645656524662302537529035916881356059013215815257201 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 9ea910bec26fce4bafefc6b73d87938a9092d38b . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (285 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '300.cool' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '800for.com.instantize.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allie.design' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blocking.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brazilianfantasy.com.jaimejacob.pt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'civex.com.dcpig.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'journalcreation.com.nurologic.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lifebeginsatconception.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'playgroundcase.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sahealthandfitness.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schnauz.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'showforvip.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spicytechnologies.net' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f00075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018ab2f2c39200000403004630440220226a8b8182290e37216a7c0081046ec5ce5e500e3050e65c0c5369b6eb05ffae022065ebf29fea63fb44b814457b604d2b1bd06dc02f5f6f7ad622e4df75f6bcf01e007700e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018ab2f2c38500000403004830460221008f412c18dd05a91cf5537bde821f7568a41da38707abed980b36d6d7e4d7bc02022100cd657d8b92a36b9d85fadbfd78679946f8f764399c2b3c8fd8c3521c39e81f05 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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