kennedygrp.com

Issued by R3

About this certificate

This digital certificate with serial number 03:76:c7:9b:9f:9e:88:31:86:f5:9d:c1:5d:af:2e:3d:f0:dc was issued on by Let's Encrypt.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=kennedygrp.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:76:c7:9b:9f:9e:88:31:86:f5:9d:c1:5d:af:2e:3d:f0:dc
Serial Number (int): 301755501506589076279438337282575217586396
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 98:5a:b1:95:c3:62:86:15:49:45:fe:c8:f1:e7:d0:74:52:13:c3:a1
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): c7:77:76:ea:7b:53:cc:cf:24:89:d8:5d:00:34:6e:c4:af:3d:d7:2a
Fingerprint (sha256): ef:79:6f:cb:70:6f:ef:81:42:d9:69:1a:1d:c3:85:b2:7d:a5:92:5b:ad:1a:d4:25:d8:e9:72:ed:30:75:f2:25

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate kennedygrp.com

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for kennedygrp.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

kennedygrp.com
kennedygrp.sancsoft.net
kennedygrp22.ngagecontent.com
www.kennedygrp.com

Other certificates including the domain name kennedygrp.com

(limited to 100 certificates)
kennedygrp.com
kennedygrp.com
fs.kennedygrp.com
eland.kennedygrp.com
www.kennedygrp.com
kennedygrp.com
kennedygrp.com
kennedygrp.com
kennedygrp.com
www.dev.kennedygrp.com
info.kennedygrp.com
info.kennedygrp.com
eland.kennedygrp.com
www.dev.kennedygrp.com
www.dev.kennedygrp.com
www.kennedygrp.com
eland.kennedygrp.com
kennedygrp.com
www.dev.kennedygrp.com
eland.kennedygrp.com
eland.kennedygrp.com
www.kennedygrp.com
info.kennedygrp.com
kennedygrp.com
www.kennedygrp.com
info.kennedygrp.com
www.dev.kennedygrp.com
info.kennedygrp.com
www.dev.kennedygrp.com
fs.kennedygrp.com
fs.kennedygrp.com
www.dev.kennedygrp.com
kennedygrp.com
kennedygrp.com
www.dev.kennedygrp.com
www.kennedygrp.com
kennedygrp.com

Certificate

The complete raw certificate details for kennedygrp.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4t61P/RIhZ2ysVdfa62
JFMGvhnSLm61gxAtBvEkXiyHy+MEWyh2JC3yvsPFdaGrOfoLBiU7eGlSqTc7CxvZ
wHwhLRlaNBqP/40ndVLvg2XiDj3hDHOLd0fcqwec65wZ7diCPj65M1Ls0R8XSbGj
INjHIqgFFLQTg8JA4Tq2CoZg7wFthPGdARwyQk17kRcFbM4xj6g86GHN+rWXKrBr
xj+ySTiEzcedVMaC4lyiXbOxFPjM43jNMjInKkfH2466mJgtBD7u5hz+bCiQqWv6
WqkguEvxfQVbp5bOzCrrPJkTj/SV5Tcs/y/MlrdygjP3XFdtYKZrel8inK9SalhG
FwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 301755501506589076279438337282575217586396
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-23 20:05:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-23 20:05:04 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kennedygrp.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24180296307583666023976158854193574807102886588051320230143496289224700341748020338278805187972226475091726862730461995593846646605409929285541973746336549461628678485352414912759918643948095411468835786557048088352432354706667858391907767960216712801549956496228270636381327907488957278526295071208325182492642499089208354842535948671571875958478986656480137623793973857479455505396113871255712921995258017564130555938191705558723420040907764412384133849538816846071102922661577462507679282393979245977907585643810200826882642524464008780993245071465882767111723885274089104186696028638473057429120312390704826959383
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							985ab195c36286154945fec8f1e7d0745213c3a1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (94 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kennedygrp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kennedygrp.sancsoft.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kennedygrp22.ngagecontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kennedygrp.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018dd7c938d700000403004830460221008b26c60aee5c21f90f9978ef1ef15ed8240a4fe74ae0f0d182f433cd010d3a59022100f2a9c5c4e62a0e1a167c9c09541a219a8070f7b650a85b69ec41d6cea5e63a160075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018dd7c938df00000403004630440220637e169229304c3018e8a534fb23b5c2ee91144e334da83b53568f5e561425e7022054488a78f07df052b45c7b49089997d62553917b119636d48591a8d46c1fbd34
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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