designsforlearning.nu

Issued by R3

About this certificate

This digital certificate with serial number 03:9f:3c:d3:6c:98:4e:9f:39:c8:9a:66:44:bb:24:8e:d4:7b was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=designsforlearning.nu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:9f:3c:d3:6c:98:4e:9f:39:c8:9a:66:44:bb:24:8e:d4:7b
Serial Number (int): 315522605592661451650947442183324264486011
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 4b:f1:4c:51:4f:2b:0e:34:df:f5:66:f0:eb:74:ae:0f:2e:26:89:c2
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): ee:6b:5d:58:83:78:13:ab:94:2d:91:8c:6e:e1:e5:12:f7:45:5b:f8
Fingerprint (sha256): f4:50:16:de:e3:7d:cb:7f:af:c2:d2:bb:ec:a9:69:f6:59:ee:5e:e6:66:77:6b:0b:fb:10:ca:f6:33:ce:fb:52

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate designsforlearning.nu

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for designsforlearning.nu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

designsforlearning.nu
www.designsforlearning.nu

Other certificates including the domain name designsforlearning.nu

(limited to 100 certificates)
www.designsforlearning.nu
www.designsforlearning.nu
www.designsforlearning.nu
www.designsforlearning.nu
www.designsforlearning.nu
www.designsforlearning.nu
dfl.ubiquitypress.com
www.designsforlearning.nu
www.designsforlearning.nu
www.designsforlearning.nu
www.designsforlearning.nu
www.designsforlearning.nu
designsforlearning.nu
designsforlearning.nu
designsforlearning.nu
www.designsforlearning.nu

Certificate

The complete raw certificate details for designsforlearning.nu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISA58802yYTp85yJpmRLskjtR7MA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzExMDQwNTUyMjlaFw0yNDAyMDIwNTUyMjhaMCAxHjAcBgNVBAMT
FWRlc2lnbnNmb3JsZWFybmluZy5udTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCC
AQoCggEBAKU7WfZeHV4Z7glTkYUKXbbQtfIPuR0oezlMx6Ms7a1HLKK+bZww8bau
4vfzIDD+83W5mkPAYfHjm3e6AMcT2lKwKrI71sCdrpxbTNo+kliIVmS7lNIKrdlT
lKfx4UrU8hA5ZbkxSiwZ3H3X5GGkdhfkjeEr3t1KsQANZ1ODd68/LPt5j4pDVQxc
lch81DuRh4vBNBP0ZV6zXNIacDMsiTIy9aVzHmEbiIxLwi5ChpIw2gCfFXZw5gQs
5uBEmAmRnI95tOjFqOcipQnkXjMu3dEmouMZqpgxlpWccWxZx4lFzejjVLt+tFEf
mTrNrC68+yrPXiwNougbtWcrR5HzF7cCAwEAAaOCAjIwggIuMA4GA1UdDwEB/wQE
AwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIw
ADAdBgNVHQ4EFgQUS/FMUU8rDjTf9Wbw63SuDy4micIwHwYDVR0jBBgwFoAUFC6z
F7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVo
dHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxl
bmNyLm9yZy8wOwYDVR0RBDQwMoIVZGVzaWduc2ZvcmxlYXJuaW5nLm51ghl3d3cu
ZGVzaWduc2ZvcmxlYXJuaW5nLm51MBMGA1UdIAQMMAowCAYGZ4EMAQIBMIIBBAYK
KwYBBAHWeQIEAgSB9QSB8gDwAHYASLDja9qmRzQP5WoC+p0w6xxSActW3SyB2bu/
qznYhHMAAAGLmRrDzwAABAMARzBFAiAGcRoQQ0103UHMo+nccjw6IZWH7ksNF7mL
mVMOikS4XgIhAKWG4zCwiO2o9I0QF0wcZgiB7TI+Sum+UdYvGa147+cxAHYAO1N3
dT4tuYBOizBbBv5AO2fYT8P0x70ADS1yb+H61BcAAAGLmRrD1QAABAMARzBFAiB3
iBY805v173ejDVwtBqY9GbiWk0XI9eT9LnOMSKST8wIhAMpmpS1KW/+5okLmQEQK
FQn5L/lLQhkSfrbYwF5fBTD5MA0GCSqGSIb3DQEBCwUAA4IBAQCkm9opGJJYW5xr
OZT2ic/kXfTwdPNwkgmoDKvNd4fDpwuQVFcfOFOkD/IJBwRDwCnywmZeEnJQE7lo
aZtK1+zuEJaLV4IDxTmxrGD6FT5xLsW4ZBw6tJa5IFn+MJ+M5K2ElE6YL6azebna
VDCZ2VPRM+7Hd0mkOkoJyQb4WJ8c6cvzwcg2gffsRG1ai/J+xczKlzKcp1H4lbrv
5b+XwyOEeiCiDqGucmQ1S/xM5mqWnljKMbFrZaloBncD1KasGMLc7TN5qHJgn58s
J88PP1ZLh9/2pDhNNS9NQIN5EZV7nlzM7W63VGfiZO4h+ToPJsisn9G566aJI4LS
g1EIo1hy
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTtZ9l4dXhnuCVORhQpd
ttC18g+5HSh7OUzHoyztrUcsor5tnDDxtq7i9/MgMP7zdbmaQ8Bh8eObd7oAxxPa
UrAqsjvWwJ2unFtM2j6SWIhWZLuU0gqt2VOUp/HhStTyEDlluTFKLBncfdfkYaR2
F+SN4Sve3UqxAA1nU4N3rz8s+3mPikNVDFyVyHzUO5GHi8E0E/RlXrNc0hpwMyyJ
MjL1pXMeYRuIjEvCLkKGkjDaAJ8VdnDmBCzm4ESYCZGcj3m06MWo5yKlCeReMy7d
0Sai4xmqmDGWlZxxbFnHiUXN6ONUu360UR+ZOs2sLrz7Ks9eLA2i6Bu1ZytHkfMX
twIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 315522605592661451650947442183324264486011
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-04 05:52:29 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-02 05:52:28 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'designsforlearning.nu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20858587593199696856497708920703873268728630969772280629506361274370244924698958577010341424462978342314059900828447161814893922523116758619977247137205636547206706902231761268784181090177072626002871352986690214494591504082439410049922393245785810959326228429863562833297774613882137094472881168949431343132480047060742711440772075039644147006144011363029346243114610053912883666013709794352226648628733143177954412133383613547480338358825154577316264852023282918354155940100730603961604681059029462761070043816921194308988052261651648775086789977764230941232611941051634483088404604339009753546260135298922768963511
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4bf14c514f2b0e34dff566f0eb74ae0f2e2689c2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'designsforlearning.nu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.designsforlearning.nu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018b991ac3cf0000040300473045022006711a10434d74dd41cca3e9dc723c3a219587ee4b0d17b98b99530e8a44b85e022100a586e330b088eda8f48d10174c1c660881ed323e4ae9be51d62f19ad78efe7310076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018b991ac3d5000004030047304502207788163cd39bf5ef77a30d5c2d06a63d19b8969345c8f5e4fd2e738c48a493f3022100ca66a52d4a5bffb9a242e640440a1509f92ff94b4219127eb6d8c05e5f0530f9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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