boisegreenbelt.app

Issued by R3

About this certificate

This digital certificate with serial number 04:9f:db:6e:61:6c:70:42:c5:06:b0:f6:42:19:d3:9b:ed:86 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=boisegreenbelt.app

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:9f:db:6e:61:6c:70:42:c5:06:b0:f6:42:19:d3:9b:ed:86
Serial Number (int): 402845714127186653830763526530624233663878
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 6a:ef:67:bd:d8:66:07:c9:21:eb:f4:4d:e5:87:55:b2:9a:f6:4a:c2
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 65:89:30:3a:ea:34:e3:5f:8d:fb:52:32:01:2d:e4:2e:a6:52:c2:1f
Fingerprint (sha256): f2:8d:58:2d:aa:19:d7:60:5c:1f:ff:5e:26:7b:c9:5b:01:18:e8:79:2a:71:64:0f:d4:1e:af:c5:56:e3:3f:de

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate boisegreenbelt.app

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for boisegreenbelt.app

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

boisegreenbelt.app
www.boisegreenbelt.app

Other certificates including the domain name boisegreenbelt.app

(limited to 100 certificates)

Certificate

The complete raw certificate details for boisegreenbelt.app in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoc3UQwSgdpT3/8q1tY6n
WrsfmrPSCOp4w9XyeCEPAHajQjVfX0NSOCaqg3xMExx2+Myhy0ktj7nkXnY9vt1x
6DLclw4nXoSu49s/lZ5C+SrS3y96mQY7EEKOTTVzeG3HouugcMOSyIQBovJkYsq6
dLp/mN7M0x8/Y8taMcKHTpAbbtyN3s0lP+S0WWegBq7OLICCNg7oX70FUu2WCrQN
kFkSlq50rlJCxNkyg+5m7bePv8LUNbA6ULROdoGoajnpD5ICkk1+DL06CKHnCky1
29h9trc/aSTaFbF1oZJi8dtKLduymGZ45LRGSmUyWg4bSH8k0l0/yLtkqbKjFuM/
fwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 402845714127186653830763526530624233663878
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-24 02:00:42 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-23 02:00:41 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'boisegreenbelt.app'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20425865235111538360649363178342550268633790975722455647782237785735216416693001110500821722136580341103796477593710895428509579545507903852623748605009439274105327004538336834579414342072785699364286046176517446807520318424143909296665489431165990111235834093420159495070764735439837415419337115631609376990861801243829163403246974103336911420142663531767110452404149148084142007133467746492910831088481567855126426422232054946704027411984376144174910122990273001897533078601370768937578812141445652043198305903734718198507600798731940482538379388450848740275806926607175033898872527486116907412535623741332584087423
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6aef67bdd86607c921ebf44de58755b29af64ac2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (46 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boisegreenbelt.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.boisegreenbelt.app'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018c99c487df0000040300473045022100cf0e4e0ac221603d38fa564c42d1072d3affeb877199aed26a9fc2dbb0142d6e02203be82f0e3f792e14abd449294e3ee0596e791bdabbd2fabf897db59e6c5e87c6007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018c99c487e20000040300473045022100cce1a864adfad98af66d2a20faf7741001c32a8350cbaa8333dc57d01f94ae48022020db4a80b3a92c87649bfcff24140ddd1a23ce7b8768ee4636583fd39e77a187
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		008061943c7ff5333ce4bbcec6c720d0a85d3d08a1ecb576541a942ae66479d3db5faa60e3d3f4db32feb4a5657a58032656487534ff3a004ca019d97c3dd8a703658bb8d2b084b42a50313ccd9d4098f89bf4e4034e5e1baeea0a5ee62abd42e67e0bb8d7d29a773f65a93cbc3603b21ad8f23d025798263f575efbd6ec53617b5e0df4bec6347be0bfa2b4d5ad10d896d1e3d84a39d1ce6c2381e84b870e77b5b2ff37720bd7fd39be8fdb1fc3ec2c15e7e2a5d2529734040ffc35d88916cf510b5d3005e82bc3c3e1380ad03f00c86656040808828bef5f286b60d65821232518b44fd266aca26ab6a4cb60fcf6a23441bc74d3fd83a2cfab546c79fabe209b