umiuniverse.org

Issued by R3

About this certificate

This digital certificate with serial number 03:83:cf:5c:05:1b:5f:eb:82:cc:35:32:a3:cb:44:7e:e9:a2 was issued on by Let's Encrypt.

With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=umiuniverse.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:83:cf:5c:05:1b:5f:eb:82:cc:35:32:a3:cb:44:7e:e9:a2
Serial Number (int): 306189475851943035640725423272863689796002
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 30:fb:9c:9d:50:94:fc:24:5c:88:ac:5e:a3:be:5c:3a:b4:f6:86:f0
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 39:d0:51:12:64:42:b3:b6:fb:1b:54:1a:65:b9:87:e3:b2:f3:5d:79
Fingerprint (sha256): e3:2d:45:89:3f:f1:36:5c:dd:b5:dd:58:fb:5c:da:06:70:41:f3:a3:eb:56:de:21:5a:c5:e0:99:0c:f3:a6:b0

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate umiuniverse.org

10

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for umiuniverse.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

andrewcounty.com
bqs.co.in
davidcrowder.com
jewellerymagazine.in
migration.epik.support.juliovillalta.com
patchables.com
sculpit.shop.militaryvaccines.org
sharksupply.fish
umiuniverse.org
vaxnation.com

Other certificates including the domain name umiuniverse.org

(limited to 100 certificates)
umiuniverse.org
jenksamericatoastmasters.club
jenksamericatoastmasters.club
sculpit.media
jenksamericatoastmasters.club
jenksamericatoastmasters.club
5272653.ca
pyaarse.org
lgbtqia.bible
leaselock.ca
jenksamericatoastmasters.club
www.canwebuild.org
www.cbbt.bible
medicalapartheid.org
ground.vc
apify.de
www.cbbt.bible
34725625397.ca
prairiesage.org
bakhtos.one
playgolf.club
tulp.care
jenksamericatoastmasters.club
jenksamericatoastmasters.club
playgolf.club
jenksamericatoastmasters.club
pellestorie.com.wetech-alliance.org
lgbtqia.bible
jenksamericatoastmasters.club
umiuniverse.org
jenksamericatoastmasters.club
umiuniverse.org
mediaberry.ca

Certificate

The complete raw certificate details for umiuniverse.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8z8+k1XGV1YsSyoy6eSD
i2ZHSKjPdWs5ADtf/K3E+NAcjX1gx1i1GypO2VI67ker3Mb+i4nUHT3PjoLjJw90
qP8BlCdxQGbzvVaXZQQ9h4ojzALhnI2/T8MtLh26nEP3pYk24UyV80rWMIGjuhuH
7d/be9pFKplxIzsW7KDXobcw793BfRBJ/GtLEKAvC1izLply48FBeqNHwfSrocMe
zl8C026Q5AtiClfarY7T4RxEVB+sM6JdU1Op3B3Ke0/2VAFaEhPEeTVq/BcXAa4e
+tDWJwBjNWCbsURnHa7XsKNTTJ9c5m2A00LzKIXcrd8VGLHW9aL/LwNYbDEViQRS
kQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 306189475851943035640725423272863689796002
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-17 21:28:53 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-16 21:28:52 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'umiuniverse.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30707095100328680706562799549684025735090379179751192765292903986516822899286439869710944722064607986670442895294739500068851602574956509522366367785072764718291589264610378051642947727352857016343844724805702310646933004140055343944045199434330579878376741468430188995195243853170532894637400350978947823601113311630321577593011247220277079533389587086336160410493444754036609902497054876103136229746991053673568798593247678901540832827072163465193783344506661290337094958590021306341322353942905742025483761799958802615821823073325405994073473775578163449246335643324266240405739851116608747393344424161671750374033
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							30fb9c9d5094fc245c88ac5ea3be5c3ab4f686f0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (215 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'andrewcounty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bqs.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'davidcrowder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jewellerymagazine.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'migration.epik.support.juliovillalta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'patchables.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sculpit.shop.militaryvaccines.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sharksupply.fish'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'umiuniverse.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vaxnation.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c79e58332000004030046304402207a09036c12b2e687974d80592816d612105310c187d7d5ee236f6c541a762798022079b2c5e44eade650e8fa6ae6cf073e64b841032e2538630070b3a3ffaf28d19a00760029d03a1bb674aa711cd3035b6557c14f8aa78b4fe8389449eca453f944bd24680000018c79e584f80000040300473045022100dbeb16cf10d0177cbfcda4f1e3e7f1d69b07238126626300fdd4dc85283c51c202202b2bd7c201ad1a7af792ad3fb67d2ca6335b92a4d015cd3650e644623f883408
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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