freedombunker.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:5c:f6:26:a5:4f:04:21:62:5a:5c:76:97:ba:8e:42:6b:6c was issued on by Let's Encrypt.

With 22 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=freedombunker.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:5c:f6:26:a5:4f:04:21:62:5a:5c:76:97:ba:8e:42:6b:6c
Serial Number (int): 292970026299108679946889003338619573922668
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 05:1a:72:7e:9e:bd:16:0f:70:61:67:f6:48:c3:7c:de:8d:6a:44:6e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): a0:70:53:80:96:8d:fe:b9:52:34:ed:5a:22:e6:92:df:8e:a5:8e:fe
Fingerprint (sha256): f2:a1:a1:1d:e6:90:2c:7c:41:ae:3d:d6:6c:21:36:78:9b:91:2d:65:33:a4:8d:04:98:b9:66:95:4f:60:71:f5

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate freedombunker.com

22

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for freedombunker.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

freedombunker.com
freedombunker.helpfulhintsforliving.com
mail.freedombunker.com
mail.millenniumchildren.net
mail.ottovent.com
mail.thinkfuture.com
millenniumchildren-net.helpfulhintsforliving.com
millenniumchildren.net
noxnews-us.helpfulhintsforliving.com
ottovent.com
ottovent.helpfulhintsforliving.com
thinkfuture.com
thinkfuture.helpfulhintsforliving.com
www.freedombunker.com
www.freedombunker.helpfulhintsforliving.com
www.millenniumchildren-net.helpfulhintsforliving.com
www.millenniumchildren.net
www.noxnews-us.helpfulhintsforliving.com
www.ottovent.com
www.ottovent.helpfulhintsforliving.com
www.thinkfuture.com
www.thinkfuture.helpfulhintsforliving.com

Other certificates including the domain name freedombunker.com

(limited to 100 certificates)
thinkfuture.com
paleobunker.com
helpfulhintsforliving.com
groovystash.com
groovystash.com
groovystash.com
*.freedombunker.com
startuplist.co
*.freedombunker.com
freedombunker.com
freedombunker.com
8commandments.com
freedombunker.com

Certificate

The complete raw certificate details for freedombunker.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArbYcFTge4TS6Z8SPjxJE
V6XgFzHSALXR8Wb3VscYKWsQ8s0RXMZFyaMsNp3alGXPBoOh8J3CmQSZ0xYQ/dMi
HGAg8VTj8c/2zZTikJkqbLhfiHl6RJf1yobwsr0y1Nzxf5N8KGtuq/XFsRAPEKHS
NaXiNjhyuwJWnhMjudfJV5+2EQQPN261MXAQdBIsWUAZMDWWYuXW4ca0OE9FEm4K
p9CTY0K9L4C7lonCyKbEHiD0TVr7PlE64qVvR5c1cMMPk7Ba1dFoS2DvMygDWaNw
+e652zDWBn2TUNPMfGoSPlAnEYpjm0IUjvIgxZwb+zmJC93EFilaaxbH3uucTB2H
yQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 292970026299108679946889003338619573922668
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-06 10:31:41 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-05 10:31:41 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'freedombunker.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21929028398549308698644585017229715825841867678595410302599388945623524293373402601472232818981760078397442890363830905257344417267675595694710470135574712228752800935341483347400337926718340636126675329742528143166685226892166047358816736892034102174144165021742623150096921188719199987133260160896588149122356290728349533427935643927049362921971998712847338439229870693454303357311132197622694128325936090736519499174203200895845581934397516750213951791504444198767915145549236119875057274285114802436845221230658836006212475986201793630858798794662707542760428607279391833382208053427362097419914198427078775113673
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							051a727e9ebd160f706167f648c37cde8d6a446e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (690 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freedombunker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freedombunker.helpfulhintsforliving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.freedombunker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.millenniumchildren.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.ottovent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.thinkfuture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'millenniumchildren-net.helpfulhintsforliving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'millenniumchildren.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'noxnews-us.helpfulhintsforliving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ottovent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ottovent.helpfulhintsforliving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thinkfuture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thinkfuture.helpfulhintsforliving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.freedombunker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.freedombunker.helpfulhintsforliving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.millenniumchildren-net.helpfulhintsforliving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.millenniumchildren.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.noxnews-us.helpfulhintsforliving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ottovent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ottovent.helpfulhintsforliving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thinkfuture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thinkfuture.helpfulhintsforliving.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500c1164ae0a772d2d4392dc80ac10770d4f0c49bde991a4840c1fa075164f6336000000165aea6f1fd0000040300463044022058c77ff5ecb2ada7eff8c214fdd800518e6f9da6bab8264ce4cec8b60a06faab02201273fcbb52da7c08f1350414f755cbc0791922ba175aa5e56f76bc2fa5215fd4007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000165aea6f20d000004030047304502202a084b890905538f3f886f6ee93b5eec4b36e19928d79565ca5955e2b894c6e6022100f956e4883bd5804e01c3c488df3bf2e9887136eb0338496b32711babd5f20e76
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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