understandingfossils.com

Issued by R3

About this certificate

This digital certificate with serial number 03:3f:4a:f5:de:48:0e:84:1e:1b:0d:a0:c3:c1:c9:fb:09:75 was issued on by Let's Encrypt.

With 30 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=understandingfossils.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:3f:4a:f5:de:48:0e:84:1e:1b:0d:a0:c3:c1:c9:fb:09:75
Serial Number (int): 282874286404122140167641763430934312061301
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 6a:27:14:25:7d:e5:7c:15:87:66:54:8b:84:c4:4e:ff:2a:9e:96:c7
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 63:1f:6d:10:72:9b:08:3f:fa:d2:2d:1a:44:0e:9e:c1:a1:32:b7:f2
Fingerprint (sha256): ef:4b:0f:b3:c2:97:31:23:e9:b8:f2:20:b4:74:4b:a4:a2:93:01:da:c0:b7:c5:71:ef:60:c5:ef:39:7e:88:f0

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate understandingfossils.com

30

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for understandingfossils.com

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

acmeebox.com
alaskastemcelltreatment.com
bedebooks.com
diplomatinteriors.com
farmwheat.com
glaretv.com
keywestbikefest.com
minnesotasportsdoctors.com
northplattedentist.com
ogdensportsdoctors.com
samplestations.com
stalwartcrew.com
thecleaninggoat.com
understandingfossils.com
vaxrobot.com
www.acmeebox.com
www.alaskastemcelltreatment.com
www.bedebooks.com
www.diplomatinteriors.com
www.farmwheat.com
www.glaretv.com
www.keywestbikefest.com
www.minnesotasportsdoctors.com
www.northplattedentist.com
www.ogdensportsdoctors.com
www.samplestations.com
www.stalwartcrew.com
www.thecleaninggoat.com
www.understandingfossils.com
www.vaxrobot.com

Other certificates including the domain name understandingfossils.com

(limited to 100 certificates)
understandingfossils.com

Certificate

The complete raw certificate details for understandingfossils.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEsLKCcb+b3JxfqdJxNM7dnCRjRJpT
0BYdu3FTPV3xIyeuq17NvLVtoWpO/q2MdZuBNQJks+XXl+sNTO9f1cyd+w==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 282874286404122140167641763430934312061301
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-17 16:24:32 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-15 16:24:31 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'understandingfossils.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				0004b0b28271bf9bdc9c5fa9d27134cedd9c2463449a53d0161dbb71533d5df12327aeab5ecdbcb56da16a4efead8c759b81350264b3e5d797eb0d4cef5fd5cc9dfb
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6a2714257de57c158766548b84c44eff2a9e96c7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (674 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acmeebox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alaskastemcelltreatment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bedebooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diplomatinteriors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'farmwheat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glaretv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keywestbikefest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'minnesotasportsdoctors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northplattedentist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ogdensportsdoctors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'samplestations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stalwartcrew.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thecleaninggoat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'understandingfossils.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vaxrobot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.acmeebox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alaskastemcelltreatment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bedebooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diplomatinteriors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.farmwheat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.glaretv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.keywestbikefest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.minnesotasportsdoctors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northplattedentist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ogdensportsdoctors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.samplestations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stalwartcrew.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thecleaninggoat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.understandingfossils.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vaxrobot.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018f87957f8e0000040300473045022100dd249039011271e54ba9903ee6640e825ae4591b6a36b4399aea9a304745b4550220100776813558a3042132ccd03d08a240ec643e08b8d2d0888482b04b02d875a00076003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018f87957f9600000403004730450220086c0ffe8b5e585330041101138d4694a29f49ebf903fcf783e3195d1e11e7160221009fe3aa2dbf81b3301606b6fb4139fec035abd4069f92c4701461f23c5bd055e1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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