primarch.org

Issued by R3

About this certificate

This digital certificate with serial number 04:54:00:97:da:8f:e7:89:d2:c9:8d:f8:1f:3d:00:55:77:34 was issued on by Let's Encrypt.

With 16 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=primarch.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:54:00:97:da:8f:e7:89:d2:c9:8d:f8:1f:3d:00:55:77:34
Serial Number (int): 377033651018192034767515930673136360847156
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 2d:c7:6b:98:2d:0f:a1:39:32:8b:b3:53:18:05:35:be:f2:a2:4b:37
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): c0:c7:0c:3d:16:2e:6e:98:2a:9c:5d:c9:9e:44:9f:8d:10:09:b8:eb
Fingerprint (sha256): ea:0b:cc:d1:40:c9:8c:c7:8e:08:9e:59:c8:2a:8b:87:14:6b:17:2a:af:54:0b:18:f3:78:b8:fd:f9:e0:83:81

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate primarch.org

16

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for primarch.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

adultpartysupplies.com
aerobatica.com.outtechs.com
alcoainnovation.com
amiiboshop.com
barberquarter.com.mmacoin.com
botshelf.info
certifiednaturalgas.com
dom.bdsmsecurity.com
e-dollarpay.com
fkh.co.in
gatewayserver.net
lottofy.com.br
maakali.in
nordic.biz.exoticmeatandmore.com
primarch.org
sanibelislandfl.com.knijnenburg.com

Other certificates including the domain name primarch.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for primarch.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGMzCCBRugAwIBAgISBFQAl9qP54nSyY34Hz0AVXc0MA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDAxMDIxODE2MDVaFw0yNDA0MDExODE2MDRaMBcxFTATBgNVBAMT
DHByaW1hcmNoLm9yZzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAN42
UWBSIo3O3DI2Me8D81abY/vimMH79/DhNkoXNyWA97RUIgTUDnA5sJzy+fHJTIi5
9QRLaYcOZPeQZnFR8IKsrS2bkGEyz9/Za9RfLnAOd5vEhlgxFmcrmS2c/UilY8Tj
DC77cO8wKD+mDMqmUVuOSdYgOEfzC4v/zXmARc4Ve0KreVFP2rGcmTgHB6QV39RM
FjcEWZcNRXz/8am74KQNZdP+c6BMnKrIvNoiFNzamK3eOLPwpY+Pl+Oq08eieiQ6
JeG17yc9kNgpMKGw8HACTpLcvCL+6q8CGjdhsu+XS7PCQFB/hAx/SqJbgn/zZany
YpSB6PMFvXRJljUOhA8CAwEAAaOCA1wwggNYMA4GA1UdDwEB/wQEAwIFoDAdBgNV
HSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4E
FgQULcdrmC0PoTkyi7NTGAU1vvKiSzcwHwYDVR0jBBgwFoAUFC6zF7dYVsuuUAlA
5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRwOi8vcjMu
by5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNyLm9yZy8w
ggFkBgNVHREEggFbMIIBV4IWYWR1bHRwYXJ0eXN1cHBsaWVzLmNvbYIbYWVyb2Jh
dGljYS5jb20ub3V0dGVjaHMuY29tghNhbGNvYWlubm92YXRpb24uY29tgg5hbWlp
Ym9zaG9wLmNvbYIdYmFyYmVycXVhcnRlci5jb20ubW1hY29pbi5jb22CDWJvdHNo
ZWxmLmluZm+CF2NlcnRpZmllZG5hdHVyYWxnYXMuY29tghRkb20uYmRzbXNlY3Vy
aXR5LmNvbYIPZS1kb2xsYXJwYXkuY29tgglma2guY28uaW6CEWdhdGV3YXlzZXJ2
ZXIubmV0gg5sb3R0b2Z5LmNvbS5icoIKbWFha2FsaS5pboIgbm9yZGljLmJpei5l
eG90aWNtZWF0YW5kbW9yZS5jb22CDHByaW1hcmNoLm9yZ4Ijc2FuaWJlbGlzbGFu
ZGZsLmNvbS5rbmlqbmVuYnVyZy5jb20wEwYDVR0gBAwwCjAIBgZngQwBAgEwggED
BgorBgEEAdZ5AgQCBIH0BIHxAO8AdQBIsONr2qZHNA/lagL6nTDrHFIBy1bdLIHZ
u7+rOdiEcwAAAYzLmsFOAAAEAwBGMEQCIHuEeLaq+8UUumjfkbDNw7GMiGe868va
MeJBJmzqFilgAiAqZRT4bAgdUHrw0+rbRnfXJLKwk5uMTxiVIUSDvVf0LAB2AO7N
0GTV2xrOxVy3nbTNE6Iyh0Z8vOzew1FIWUZxH7WbAAABjMuawbIAAAQDAEcwRQIh
ANrY0/G5CIOfqmnxs5IZMlmJcivXn2oDNJp32DnO5GJOAiAGpB16pWdI6nou0bYU
t5qsstyA4YmCgYZWMJMA43OlYTANBgkqhkiG9w0BAQsFAAOCAQEAnISgKACM3nNZ
AuHrOuR9JCtZnMVKTIzC6lRD0DuYTlxCl5RT9LQbaEGzT9xPLnnGN4pSOaW+w6Ap
0MY/wjTP+1/VoVI2DjrB2ir5G4Qx1iWPVLIJQrRt2RxwQqoclFCHvxqWfPmnpFPM
WCPcHmZdN2srNA8bMRNj80E3L7/0WMoXy9bkrVkyVVcWAm3Yg7oT4Q3F85rZ8GLT
sfdg0xLx3Osvu4nV3feNbFYoor5Amdpt2JREI4D16GFW+FmCSKZyDUQfQffKOmDw
bdHj+Z0naRVVKj3hn5wMOH38MEJfcwh31MhJF8dHBHIpALf/GYYDGTZl12Sqs8Qf
AKdC2UewzA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3jZRYFIijc7cMjYx7wPz
Vptj++KYwfv38OE2Shc3JYD3tFQiBNQOcDmwnPL58clMiLn1BEtphw5k95BmcVHw
gqytLZuQYTLP39lr1F8ucA53m8SGWDEWZyuZLZz9SKVjxOMMLvtw7zAoP6YMyqZR
W45J1iA4R/MLi//NeYBFzhV7Qqt5UU/asZyZOAcHpBXf1EwWNwRZlw1FfP/xqbvg
pA1l0/5zoEycqsi82iIU3NqYrd44s/Clj4+X46rTx6J6JDol4bXvJz2Q2CkwobDw
cAJOkty8Iv7qrwIaN2Gy75dLs8JAUH+EDH9KoluCf/NlqfJilIHo8wW9dEmWNQ6E
DwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 377033651018192034767515930673136360847156
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-02 18:16:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-01 18:16:04 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'primarch.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28051688845411324345544948226517271953144786064118489885000462286410352162989947896033538418892113191824786554917458779867331796022176468693199600000970372101692705642024948492096250667922479344832505026781999004955297286572281589581884108979913030680055596887965912422372073961765895988525488116373291707342606699474301136364369757062977383724542381361535564174342784931826188577860084637096496030343685194499647095671055072284194330435019117440497208691871339331495950600080160371219407624756454107731082783574024736473078781530040719859970517444227674544076061805773245201647749617264854376809579386248297343517711
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2dc76b982d0fa139328bb353180535bef2a24b37
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (347 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adultpartysupplies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aerobatica.com.outtechs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alcoainnovation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amiiboshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barberquarter.com.mmacoin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'botshelf.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'certifiednaturalgas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dom.bdsmsecurity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e-dollarpay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fkh.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gatewayserver.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lottofy.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maakali.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nordic.biz.exoticmeatandmore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'primarch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanibelislandfl.com.knijnenburg.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018ccb9ac14e000004030046304402207b8478b6aafbc514ba68df91b0cdc3b18c8867bcebcbda31e241266cea16296002202a6514f86c081d507af0d3eadb4677d724b2b0939b8c4f1895214483bd57f42c007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018ccb9ac1b20000040300473045022100dad8d3f1b908839faa69f1b39219325989722bd79f6a03349a77d839cee4624e022006a41d7aa56748ea7a2ed1b614b79aacb2dc80e18982818656309300e373a561
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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