freedomprojectmedia.org
Issued by R3
About this certificate
This digital certificate with serial number 03:a2:ae:0f:3d:41:87:04:ac:bd:e1:8e:f6:07:54:e3:a2:79 was issued on by Let's Encrypt.
With 13 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=freedomprojectmedia.org
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 03:a2:ae:0f:3d:41:87:04:ac:bd:e1:8e:f6:07:54:e3:a2:79Serial Number (int): 316693966034610826919196036026762042516089
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 7b:9c:16:58:a0:1b:fb:75:8f:22:72:82:49:af:a5:33:46:65:ac:11
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 4c:2a:63:b6:5c:62:5d:84:e3:0e:96:cf:2f:0b:0e:d5:bf:b0:64:87
Fingerprint (sha256): f0:71:c5:74:de:ec:24:6d:9e:8e:1c:cf:6f:d3:2f:81:c1:b0:2b:58:8a:2f:7e:f1:b1:f2:11:14:62:d7:f6:7a
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate freedomprojectmedia.org
13
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for freedomprojectmedia.org
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
clayclarkstowergardens.com
convoyofhonor.net
freedomprojectmedia.org
gilbertlandscapers.com
godex.bdsmsecurity.com
goytoy.net
madeinled.com
montrealforum.com
omgurudev.com
packyourwits.com
schnauz.com
thai-gold.com
wlroeinternational.net
convoyofhonor.net
freedomprojectmedia.org
gilbertlandscapers.com
godex.bdsmsecurity.com
goytoy.net
madeinled.com
montrealforum.com
omgurudev.com
packyourwits.com
schnauz.com
thai-gold.com
wlroeinternational.net
Other certificates including the domain name freedomprojectmedia.org
(limited to 100 certificates)
www.freedomprojectmedia.org
www.freedomprojectmedia.org
www.freedomprojectmedia.org
canibuild.world
freedomprojectmedia.org
freedomprojectmedia.org
freedomprojectmedia.org
resumestudy.com.freedomprojectmedia.org
freedomprojectmedia.org
vindl.ie
www.freedomprojectmedia.org
sculpit.life
www.freedomprojectmedia.org
freedomprojectmedia.org
freedomprojectmedia.org
tulp.care
freedomprojectmedia.org
dew.sc
freedomprojectmedia.org
www.freedomprojectmedia.org
www.freedomprojectmedia.org
canibuild.world
freedomprojectmedia.org
freedomprojectmedia.org
freedomprojectmedia.org
resumestudy.com.freedomprojectmedia.org
freedomprojectmedia.org
vindl.ie
www.freedomprojectmedia.org
sculpit.life
www.freedomprojectmedia.org
freedomprojectmedia.org
freedomprojectmedia.org
tulp.care
freedomprojectmedia.org
dew.sc
freedomprojectmedia.org
Certificate
The complete raw certificate details for freedomprojectmedia.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF3zCCBMegAwIBAgISA6KuDz1BhwSsveGO9gdU46J5MA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDA0MTcwMjQxNDRaFw0yNDA3MTYwMjQxNDNaMCIxIDAeBgNVBAMT F2ZyZWVkb21wcm9qZWN0bWVkaWEub3JnMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A MIIBCgKCAQEAxEmH+qVdZCh58JyEV5w/IT/hNW1Je31NLa/aal0obzjCRl4dnnma va73dpcO595gVAZGyuZkyct61zseS5uh0jAuXReuSXJdaAtlqEnvjTqUMPWIa1kJ z887gi3/e1qV9i1BPRQQk0pxObLxQuL4GJCcjJUowZPPpfF1EnkeTNjP7IS2+ryw ei2MKvcSwxdmzRiw3oByrRCeByRaKDJUT0fJnA03Bi3lkHZ9RXx0jgCIDb2YfAhL LEYcD/yJoUvDK1cTuq9Fn84vBDkrokcxDSkj/eP843HWH9wcU4MgKJkZXCGhPyKl ZoKfoQYeQjYxJwAqsdok1UDt0yXsTGbUkwIDAQABo4IC/TCCAvkwDgYDVR0PAQH/ BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8E AjAAMB0GA1UdDgQWBBR7nBZYoBv7dY8icoJJr6UzRmWsETAfBgNVHSMEGDAWgBQU LrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGG FWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmku bGVuY3Iub3JnLzCCAQYGA1UdEQSB/jCB+4IaY2xheWNsYXJrc3Rvd2VyZ2FyZGVu cy5jb22CEWNvbnZveW9maG9ub3IubmV0ghdmcmVlZG9tcHJvamVjdG1lZGlhLm9y Z4IWZ2lsYmVydGxhbmRzY2FwZXJzLmNvbYIWZ29kZXguYmRzbXNlY3VyaXR5LmNv bYIKZ295dG95Lm5ldIINbWFkZWlubGVkLmNvbYIRbW9udHJlYWxmb3J1bS5jb22C DW9tZ3VydWRldi5jb22CEHBhY2t5b3Vyd2l0cy5jb22CC3NjaG5hdXouY29tgg10 aGFpLWdvbGQuY29tghZ3bHJvZWludGVybmF0aW9uYWwubmV0MBMGA1UdIAQMMAow CAYGZ4EMAQIBMIIBAgYKKwYBBAHWeQIEAgSB8wSB8ADuAHUA7s3QZNXbGs7FXLed tM0TojKHRny87N7DUUhZRnEftZsAAAGO6iVppwAABAMARjBEAiBtl7EdnADOVKMm OITrJRni26mmfQ0n6rnKsbM7HvzSeAIgGHDBFvZ0wFont/JhezQz+uddvWXMkRCF j8QsglZS84QAdQDf4VbrqgWvtZwPhnGNqMAyTq5W2W6n9aVqAdHBO75SXAAAAY7q JWqSAAAEAwBGMEQCIAYw14WHeJeVq7euP05bIxZUOm1nIag+oJsN6xXKx167AiBO eqGfWK1fM70gDJAiHULP7Jhq4qEYCclURF728LUWNTANBgkqhkiG9w0BAQsFAAOC AQEAI9bnqmUPS/bDgbBFKNIKeqc6suow3dZEisZtu0Q+GY7LEY0OQapCoPov9VLA x8u4CIvjMsbiXXOCeKhpKCgpepcLpI/AvvcApsNglTHiw5DY0ELGNx9duXGQ8o5f 7mfAq1mnu8KyRsGbQDRwej7zFyvbwW6d1jCL1Kcb07+2ieZMFDGa/o27GeYAMwti xvWPdByakZjWmT5QGsHEsOBniKSgzTa/H3G7KuQx3XcgARVF1jkg4B1XsIYBYawj exSSXCOg8oq1IUmGSXkgbu8Ck2IWfvGmtISbB+y/BUfKJd6AMjQgMZiNSxkpVXkI rDo8CtFQMN1mwGDxp0YlqRpkLQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxEmH+qVdZCh58JyEV5w/ IT/hNW1Je31NLa/aal0obzjCRl4dnnmava73dpcO595gVAZGyuZkyct61zseS5uh 0jAuXReuSXJdaAtlqEnvjTqUMPWIa1kJz887gi3/e1qV9i1BPRQQk0pxObLxQuL4 GJCcjJUowZPPpfF1EnkeTNjP7IS2+rywei2MKvcSwxdmzRiw3oByrRCeByRaKDJU T0fJnA03Bi3lkHZ9RXx0jgCIDb2YfAhLLEYcD/yJoUvDK1cTuq9Fn84vBDkrokcx DSkj/eP843HWH9wcU4MgKJkZXCGhPyKlZoKfoQYeQjYxJwAqsdok1UDt0yXsTGbU kwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 316693966034610826919196036026762042516089 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-17 02:41:44 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-16 02:41:43 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'freedomprojectmedia.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24778967343850781773715065509509640138049213938685687073433764585510768229343829420977001469359744326892676624835358726215784637302375104562412571399363482312612557579664603585445037752804721882585697712241559879784974233207820408406988401847469111192817286058734644874861779900246532428061844983749208630564941870097110934159586133705184371834800252335128632860211431101083144350063142365857471977150445704046548749118453997440259727695464293681302205079187421681113515684389211664019568724647555093457427643563715507112987461914899688952451591543629289720645363363166979326276697718910676907881784178263540946621587 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 7b9c1658a01bfb758f22728249afa5334665ac11 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (254 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clayclarkstowergardens.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'convoyofhonor.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freedomprojectmedia.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gilbertlandscapers.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'godex.bdsmsecurity.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goytoy.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'madeinled.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'montrealforum.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omgurudev.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'packyourwits.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schnauz.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thai-gold.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wlroeinternational.net' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes) 00ee007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018eea2569a7000004030046304402206d97b11d9c00ce54a3263884eb2519e2dba9a67d0d27eab9cab1b33b1efcd27802201870c116f674c05a27b7f2617b3433fae75dbd65cc9110858fc42c825652f384007500dfe156ebaa05afb59c0f86718da8c0324eae56d96ea7f5a56a01d1c13bbe525c0000018eea256a92000004030046304402200630d78587789795abb7ae3f4e5b2316543a6d6721a83ea09b0deb15cac75ebb02204e7aa19f58ad5f33bd200c90221d42cfec986ae2a11809c954445ef6f0b51635 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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