thoughtforthesoul.org

Issued by R3

About this certificate

This digital certificate with serial number 03:94:57:e7:4e:b3:1a:9d:56:15:bb:d1:21:bc:cc:74:29:ef was issued on by Let's Encrypt.

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=thoughtforthesoul.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:94:57:e7:4e:b3:1a:9d:56:15:bb:d1:21:bc:cc:74:29:ef
Serial Number (int): 311815491952005268751593038919880743856623
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ad:3b:cd:db:87:f5:29:f2:1d:24:7e:91:74:bf:ee:aa:12:5d:f5:ec
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): ca:76:88:38:b3:42:f8:db:fa:13:1d:ac:1f:be:dc:eb:ea:9a:6b:19
Fingerprint (sha256): e8:2c:85:1a:e1:da:ba:ed:8c:c0:29:f0:8f:60:1c:b6:d1:ed:38:06:89:eb:86:c5:47:28:3a:81:71:5f:79:9e

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate thoughtforthesoul.org

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for thoughtforthesoul.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bannerexchangeservice.com
contactosexo.com
creditper.com
dhaadi.com
diannedodge.com
getredapple.com
osceolawaste.com
thoughtforthesoul.org

Other certificates including the domain name thoughtforthesoul.org

(limited to 100 certificates)
leaselock.ca
kiesza.ca
allanblock.ca
kiesza.ca
thealternativepac.org
kiesza.ca
leaselock.ca
thoughtforthesoul.org
kiesza.ca
thoughtforthesoul.org
leaselock.ca
allanblock.ca
hb2b.org
34755625397.ca
thoughtforthesoul.org
allanblock.ca
kiesza.ca
thoughtforthesoul.org
kiesza.ca
wycliffeassociates.bible
elasticexecutiveservice.cloud
34755625397.ca
kiesza.ca
healthfine.org
thoughtforthesoul.org
arbitrage.cloud
thoughtforthesoul.org
thoughtforthesoul.org
condos.world
leaselock.ca

Certificate

The complete raw certificate details for thoughtforthesoul.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAss06kxVPScKnkTvf+LtJ
l36P9tgiz2p50v+a3aubfPcYbjjn9Ih2OzvvJwkCwdr2Xbje7ueVc3sU1S3thhkK
yYMddEQvAc8ffhwxK8w/bSIvVZvNI6EYHyaLBzoU3+YHro/zaZ3/P+z2OO9RGk4x
StGbANcxUKIzoeMpNNE2JlYisGt2EiyiI0oKW1B+aGva7oUHEWR2eJq6jG+h2EGG
53rJoRlBz6SwEFQSKLbfIe6Woy8r2aDQPCvt8S+Y7923wm38Qwnvk0fAOJup+KN4
Al8ga5fDbkAD/z/G8PZlrbMAxbrASEVwlPnl+mWYxHNTDgCVabP7h+S6cgT5sSh/
4QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 311815491952005268751593038919880743856623
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-02 23:39:29 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-01 23:39:28 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thoughtforthesoul.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22571620380451296387415095439774596034495041315480913448826599312685430852435532597769674154923458768965688210002700225783265485451392741964990622788514944463017984257936245593070150247864142196896803251488069236309995612089432141706608126650502667517998555132257376921747555525804473516033559901969295068447112073418809396315726957818964423141032835839410320900181400446484763989814961741246829077547814035923499492951288251553214943857173732662690247446767396977906053631398282028471124866709914159966990055783120935000849188853284345050526817170174341350667336332425317460179637869039078093413035312102275644162017
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ad3bcddb87f529f21d247e9174bfeeaa125df5ec
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (150 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bannerexchangeservice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contactosexo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'creditper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dhaadi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diannedodge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getredapple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'osceolawaste.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thoughtforthesoul.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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