graphologist.org

Issued by R3

About this certificate

This digital certificate with serial number 04:aa:50:b7:6c:59:95:85:70:fe:49:e3:66:00:f4:84:85:53 was issued on by Let's Encrypt.

With 12 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=graphologist.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:aa:50:b7:6c:59:95:85:70:fe:49:e3:66:00:f4:84:85:53
Serial Number (int): 406404436731186248763900771199691958551891
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: ee:1e:d8:6f:36:7d:aa:92:f3:f0:35:b8:af:a4:1b:01:5b:92:05:42
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 87:20:35:8f:91:54:13:11:0d:b6:f0:0a:56:b0:83:9b:f8:26:c4:18
Fingerprint (sha256): f1:35:bf:e6:68:c5:c0:b6:0f:ee:fd:8f:3d:e8:0e:63:de:42:2e:9a:b8:c3:e6:2a:5a:df:fe:a0:44:67:8f:84

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate graphologist.org

12

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for graphologist.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

graphologist.org
graphologists.net
graphologists.org
graphology.app
graphology.club
graphology.consulting
www.graphologist.org
www.graphologists.net
www.graphologists.org
www.graphology.app
www.graphology.club
www.graphology.consulting

Other certificates including the domain name graphologist.org

(limited to 100 certificates)
graphologist.org
graphologyschool.com
graphology.club
graphologist.org
graphologist.org
graphology.club
graphology.associates
graphologist.org
handwriting.repair
graphologist.org
graphologists.org
graphologist.org
handwriting.repair
school.graphologist.org
graphology.associates
graphologist.org
graphologist.org
graphologist.org
graphologist.org
graphology.associates
graphologists.org
gc.graphologist.org
graphologist.org
graphologist.org
school.graphologist.org
graphologist.org
graphologist.org
graphologist.org
graphologist.org
graphologist.org
graphologist.org
graphologyschool.com
graphologist.org
graphologist.org
go.graphologist.org
handwriting.repair
graphologyschool.com
graphologist.org
graphologist.org
graphologists.org

Certificate

The complete raw certificate details for graphologist.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy9hgL+7iql9/yR1b01CG
M1V5/vAmwN1JokMmkGLxmhJmYptleA15dctlSU+HrWlUA5bN+mrG0cbbcrvUG+WG
s+J1G7SPOWxHI6eoJTfgcdfpIzNParRDY7plM/hAi3QyeRn97UHA7KqajX6XN7eB
qKxNJFlKyzZzvgzoCqizf0M5cl+vaoTorCEzaZ2R3Gdd64i8+CkE0YOl3yeD5r8i
p2QU6K6XcInZ6qWojgxF2gt1MBm2Pqp+h8zQ/dLb699DAbns3IMyTaiSFauwa2eB
mSWxFsL8GXvkNbFDdB2N7BePRpRAKgbf94tZleQB4eLWj6Oy7qWfH4vEhpU57xIf
vwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 406404436731186248763900771199691958551891
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-25 07:32:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-24 07:32:07 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'graphologist.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25733074757984705526022294871581787943970942683854866702804343733171359208102411191707393176517928622144275125835795316161772609348028617543582497472407970135435552064206746910360642766830305804138762819599839041478239985340618279791875948793504230722833600689942248794570266424724497684312527525253150935145305557021811739539618774986954541880865239561733873441023412197201163764842163118506040000801325488248048606877426897767454975797415200826227369126144151160041033746455900220981314500582559554298750639319166857930332766216101889415250996912430041599641447287840286232280652640151239581860160468595512100134847
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ee1ed86f367daa92f3f035b8afa41b015b920542
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (251 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'graphologist.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'graphologists.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'graphologists.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'graphology.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'graphology.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'graphology.consulting'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.graphologist.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.graphologists.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.graphologists.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.graphology.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.graphology.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.graphology.consulting'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018acb779f74000004030047304502201f780573c8729eaa57862f71971991a96aa5b25d40fbe392cd07132c4256b79d0221009b3dd206ffc18c86205e3c8eff075471446ae3cb537434c9a73d37e5dec1eaaf007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018acb779f6d00000403004730450220226f66a62abc8bb46b4a8735bdb819ab1ba4f9892fc4a58f1979201a43618415022100e11adf6ae612c02f65c6f7bdf311928f2b0bfa128b9275b4069c6da86812032c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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