standingforamerica.org
Issued by R11
About this certificate
This digital certificate with serial number 04:fd:df:74:4f:ed:1b:92:d2:04:a5:09:d7:07:a6:14:6b:f3 was issued on by Let's Encrypt.
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=standingforamerica.org
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 04:fd:df:74:4f:ed:1b:92:d2:04:a5:09:d7:07:a6:14:6b:f3Serial Number (int): 434837604328630010916971924408241789103091
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: b9:f0:57:40:d9:26:b8:4e:75:94:5b:c1:3f:85:07:95:48:49:2e:87
AuthorityKeyId: c5:cf:46:a4:ea:f4:c3:c0:7a:6c:95:c4:2d:b0:5e:92:2f:26:e3:b9
Fingerprint (sha1): 2f:09:21:dc:f9:bf:b4:07:ea:24:a1:2b:08:cf:81:20:83:49:7c:d3
Fingerprint (sha256): eb:5b:72:30:6d:97:43:24:ea:57:36:c8:33:89:56:fb:95:e6:bb:9c:c6:2e:33:38:a6:45:27:c4:5e:ea:16:04
Issuing Certificate URL: http://r11.i.lencr.org/
Revocation information
OCSP Server: http://r11.o.lencr.orgCheck the revocation status for certificate standingforamerica.org
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for standingforamerica.org
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
standingforamerica.org
Other certificates including the domain name standingforamerica.org
(limited to 100 certificates)
standingforamerica.org
standingforamerica.org
impossible.ca
standingforamerica.org
www.working.dog
standingforamerica.org
liquidproductions.media
shadi.world
standingforamerica.org
standingforamerica.org
biblecourse.ca
reawakening.news.standingforamerica.org
standingforamerica.org
enerpactoolsgroup.de
xn--lgbt-lge-c6a.de
standingforamerica.org
impossible.ca
standingforamerica.org
www.working.dog
standingforamerica.org
liquidproductions.media
shadi.world
standingforamerica.org
standingforamerica.org
biblecourse.ca
reawakening.news.standingforamerica.org
standingforamerica.org
enerpactoolsgroup.de
xn--lgbt-lge-c6a.de
Certificate
The complete raw certificate details for standingforamerica.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgISBP3fdE/tG5LSBKUJ1wemFGvzMA0GCSqGSIb3DQEBCwUA MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD EwNSMTEwHhcNMjQwNjEzMDkwMTMxWhcNMjQwOTExMDkwMTMwWjAhMR8wHQYDVQQD ExZzdGFuZGluZ2ZvcmFtZXJpY2Eub3JnMIICIjANBgkqhkiG9w0BAQEFAAOCAg8A MIICCgKCAgEAmO/ubJCaYgTsBYmJWEtO3Aj8DoPtUgOR8fGHsW6dX8ns0iHA5ytv H1GqoKTE2uZx+5/0+5vSxgxZLXdcAbQa373ev4EdDaa4+hCOEtR9962ABA9ZXb6X Pjjdhz3MqgsG1o+5qvaeGVmnJ7Wch0brFtxN0zXCx9yOt4brg3rJOyFCLynSFNrm 2OenchGLDJTTO+BvMx3IDjqbD+WboQUuNhWpRQEUHC0Z77BezsGv/0ReVqGHQGMt p4Q+W+m+m1i9456tN5H0VyeSGKzJO57WxX1y6rw8ZO/+rIMmQQjOWXgBMFyknL1b DvQ7dX3oiDRH7SjBDY9CfRHQLP0TPq4q9AtDaC2cKx5aBQraB5MUn6nDPePNpi/A 993mUgZAwSeEYsu2cYIQ+JjgTK/wANzLA8nCnAkEZVzgLsMhbYtdUHoFyXDkXUfk 3ihABbWqNuQKTvMzyDhCXTjflBQ5Yhl3/z8U9uxeWMEA9apuUf4e0PhB1tZxTurv JaGP5EndPlt+qpnjtCPTiKdJ3spe52iB9ZVlWBP2keoraJT8ZRAQEpIuChVOU4Ju BYu9fF36l+/KN0RjNFV9F1ApnPMIazcYZZigWi709OLdIEnlnaAUvezcQQLaraG/ uNnXmIWsD3SN3j3eJyR8PhgpZ1u7taPvNG/ncLmmpwbwJQtfkqWARIcCAwEAAaOC AhgwggIUMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYB BQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUufBXQNkmuE51lFvBP4UHlUhJ LocwHwYDVR0jBBgwFoAUxc9GpOr0w8B6bJXELbBeki8m47kwVwYIKwYBBQUHAQEE SzBJMCIGCCsGAQUFBzABhhZodHRwOi8vcjExLm8ubGVuY3Iub3JnMCMGCCsGAQUF BzAChhdodHRwOi8vcjExLmkubGVuY3Iub3JnLzAhBgNVHREEGjAYghZzdGFuZGlu Z2ZvcmFtZXJpY2Eub3JnMBMGA1UdIAQMMAowCAYGZ4EMAQIBMIIBAgYKKwYBBAHW eQIEAgSB8wSB8ADuAHUAPxdLT9ciR1iUHWUchL4NEu2QN38fhWrrwb8ohez4ZG4A AAGQEQucwAAABAMARjBEAiA/c5Ur+P7UXXuASNk0lkFo/S1yxRwCmspMaFfB6Kz+ QQIgDVk2t8EYYXvaJDn02khmkySBqTkD9te844P90eE4XnkAdQB2/4g/Crb7lVHC Ycz1h7o0tKTNuyncaEIKn+ZnTFo6dAAAAZARC50CAAAEAwBGMEQCIEW235sDODnW 7tGDRQvDVZpIhMRjeyKfp/cTZ730sjEnAiBC6tZaqj3ZORJZnel7KEGUFLRpfZEb c4BcFH3jc5lBcTANBgkqhkiG9w0BAQsFAAOCAQEANwMeicVM9zyDINmDpRm1xbG4 FF/4Ox3fBGGUtn/fdSt8ZFnae+aQRE7xp1y8OahgUZ3Yf6Q4l9IUes/EV/xwIfwC 3o7jXDKHPS2154hdTK1vf8qY1+H+EX20zYsEHqczFIpqfrrcZ7XZ5ADye7+gDEdE /L9PuxvIyjCV/3V3Hqg49bxy2c6SuRPDorXz3DQC4LwB+gNN3h5zvg3u7f4zFcWj e6uo9CYVuVdJYJbMUXCVGH32/GFIKeHoW87OvoNO4It//JL0wVKlGcvDyy4qtng1 8Z8hUVaBRvizLGabimhMWxPUuzIf2Unv05YNe6fmZhNCmwlHXeavP3QqFG1oiw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAmO/ubJCaYgTsBYmJWEtO 3Aj8DoPtUgOR8fGHsW6dX8ns0iHA5ytvH1GqoKTE2uZx+5/0+5vSxgxZLXdcAbQa 373ev4EdDaa4+hCOEtR9962ABA9ZXb6XPjjdhz3MqgsG1o+5qvaeGVmnJ7Wch0br FtxN0zXCx9yOt4brg3rJOyFCLynSFNrm2OenchGLDJTTO+BvMx3IDjqbD+WboQUu NhWpRQEUHC0Z77BezsGv/0ReVqGHQGMtp4Q+W+m+m1i9456tN5H0VyeSGKzJO57W xX1y6rw8ZO/+rIMmQQjOWXgBMFyknL1bDvQ7dX3oiDRH7SjBDY9CfRHQLP0TPq4q 9AtDaC2cKx5aBQraB5MUn6nDPePNpi/A993mUgZAwSeEYsu2cYIQ+JjgTK/wANzL A8nCnAkEZVzgLsMhbYtdUHoFyXDkXUfk3ihABbWqNuQKTvMzyDhCXTjflBQ5Yhl3 /z8U9uxeWMEA9apuUf4e0PhB1tZxTurvJaGP5EndPlt+qpnjtCPTiKdJ3spe52iB 9ZVlWBP2keoraJT8ZRAQEpIuChVOU4JuBYu9fF36l+/KN0RjNFV9F1ApnPMIazcY ZZigWi709OLdIEnlnaAUvezcQQLaraG/uNnXmIWsD3SN3j3eJyR8PhgpZ1u7taPv NG/ncLmmpwbwJQtfkqWARIcCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 434837604328630010916971924408241789103091 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R11' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-13 09:01:31 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-11 09:01:30 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'standingforamerica.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 623929470544372040969954684620261570600166090484467954062890255601205112233837256664573002087655512525603273479886583922523622956071048425576270027539220122812919832964146276674954784822159789677740974633654305399029606740542888402306807321496494795368477696236368745499469099560711940982160487357031847822004610827467887122309062097733226884168919642608354630508445902415971796399789626678113449547514513589272066772243131049568094033129334187372091764141455428167995911734600322237313792002294945682155112315050299345149370535507807064276936519997090423620342347035076122196226279649633076025480128865945959190199391519238375424756502832112734835017426129025962958888002453710976779277400300034977612030989345007235053779657725293147862232877899466007642117978816474602759583161807541693423730546189782393945518748216814500862728742491582131309570242305268265396544844555889969974440455672044019598540008221599161704305803139639068413801080067412001055397033368764650113551086496828163457454520257194487884994396167604920185978730787288433841339680129858138039437630790607279609716837872882831555783843068289015812920225083718154837571157473929234705549665161372013925831279938615559525297931779599531615901397315278664108290884743 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) b9f05740d926b84e75945bc13f85079548492e87 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c5cf46a4eaf4c3c07a6c95c42db05e922f26e3b9 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'standingforamerica.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes) 00ee0075003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e00000190110b9cc0000004030046304402203f73952bf8fed45d7b8048d934964168fd2d72c51c029aca4c6857c1e8acfe4102200d5936b7c118617bda2439f4da4866932481a93903f6d7bce383fdd1e1385e7900750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a7400000190110b9d020000040300463044022045b6df9b033839d6eed183450bc3559a4884c4637b229fa7f71367bdf4b23127022042ead65aaa3dd93912599de97b28419414b4697d911b73805c147de373994171 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 0037031e89c54cf73c8320d983a519b5c5b1b8145ff83b1ddf046194b67fdf752b7c6459da7be690444ef1a75cbc39a860519dd87fa43897d2147acfc457fc7021fc02de8ee35c32873d2db5e7885d4cad6f7fca98d7e1fe117db4cd8b041ea733148a6a7ebadc67b5d9e400f27bbfa00c4744fcbf4fbb1bc8ca3095ff75771ea838f5bc72d9ce92b913c3a2b5f3dc3402e0bc01fa034dde1e73be0deeedfe3315c5a37baba8f42615b957496096cc517095187df6fc614829e1e85bcecebe834ee08b7ffc92f4c152a519cbc3cb2e2ab67835f19f2151568146f8b32c669b8a684c5b13d4bb321fd949efd3960d7ba7e66613429b09475de6af3f742a146d688b