umiprecepts.org

Issued by R3

About this certificate

This digital certificate with serial number 03:f8:44:1f:37:c5:fe:99:be:f5:e4:75:28:21:1b:50:a1:13 was issued on by Let's Encrypt.

With 16 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=umiprecepts.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:f8:44:1f:37:c5:fe:99:be:f5:e4:75:28:21:1b:50:a1:13
Serial Number (int): 345817434387808739013885061136335586238739
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 22:eb:4e:cb:aa:da:58:25:b3:74:7e:04:d1:36:9f:51:a3:54:2c:7c
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 9a:87:46:2a:dd:24:77:e2:91:9a:f7:59:b9:ea:7d:af:f0:46:3a:3c
Fingerprint (sha256): ed:95:01:50:c1:14:ce:c4:ec:71:91:73:64:81:98:83:61:d3:59:e0:5c:fc:66:dc:6e:9d:62:16:9d:e3:b6:42

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate umiprecepts.org

16

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for umiprecepts.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bioblogs.com
cameronuselding.com
coastalsurfacesolutions.info
compelworks.com
estarpay.net
georgeannefranziska.com
gogreenflorida.com
homeschoolclep.com
investorgame.com
iwontcomplywithyourlies.com
jaredcummingsvideo.co
largestages.com
planagers.com
processinghogs.com
rxsugarincretins.com
umiprecepts.org

Other certificates including the domain name umiprecepts.org

(limited to 100 certificates)
celebratechristian.org
umiprecepts.org
diskjockeys.ca
librti.ca
candles.cool.umiprecepts.org
umiprecepts.org
watermarkfarm.org
brilliantscience.org
umiprecepts.org
aquatic-tribes.org
yeshivocation.org.bdutv.com.umiprecepts.org
umiprecepts.org
biospace.one
umiprecepts.org
leadership.bible
exchanged.media
hydratight.ca
umiprecepts.org
umiprecepts.org

Certificate

The complete raw certificate details for umiprecepts.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQFsLMpeCXBJDojOMXKn
qKsq0GzQGtkOogm8bzZfu7Otoih9NGytmIAktSrA58boziTp2yJzjv3dcaGy5Y4E
LTe2LWyveZFtLwmiZacB88588D/tx6RNSS2W3Nq0IlnojS+iZOMj+yIyXwNG0WCJ
8pXmPn/C8kHijyp5hbot3tyXOe2Tdi+qVK27wrZ9VgzBNoIOq0BRYBFBI1na+8Fx
H0yhmHXsxsu65UUdyFYUNoLdmLKQyMxuGSXnpgagtkWMVpnoyPs/VLlABcTV5pCJ
+nZ4lBdaCcVmK1yGyJgtfylc3RGlBI5dPmj3ithTzN+YuUnvUbqbg1hm8k6DWIIa
qQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 345817434387808739013885061136335586238739
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-27 06:59:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-26 06:59:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'umiprecepts.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24869647568029507787143387293979522311112188377400359291176591106943712725575680259498307986349414165545332249608845809761659458417760431629054606698385135675093222306956089332084407264137949836478593200376212282400012921170436230820525992395162497205661424865965454809761865174699214209744011206536200049653756507119986910231094173782708684410551020470447882438483295396596172921259048492093528578475062818484202916285269098178091452931180239575332475631789852581349683245345558821045831718199023170472048947094317421938267245605083188267031234652544846600585745722633288133787564777368552807998172123980021530499753
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							22eb4ecbaada5825b3747e04d1369f51a3542c7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (326 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bioblogs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cameronuselding.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coastalsurfacesolutions.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'compelworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'estarpay.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'georgeannefranziska.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gogreenflorida.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homeschoolclep.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investorgame.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iwontcomplywithyourlies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jaredcummingsvideo.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'largestages.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'planagers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'processinghogs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rxsugarincretins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'umiprecepts.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018f1e90f79f000004030046304402204061822cccd19185413028f1834ba5d33b058352384800dad2f6f0dd00f099b102207687539eb42894f9017f18bb78eb80dc5fb076cbeece38fb2205ef1ae2c8b8160076003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018f1e90f7a70000040300473045022100aae4e692a40579cbd09dd8e7e4abedcb975cc1d6a0c06f1ed3bd108ab4854b3f02202edebc23b58c6f37dcf9c1357f523270319e3d0f5a2ebe327b540c221fc87c53
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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