stonefamilyfund.org

Issued by R3

About this certificate

This digital certificate with serial number 03:d8:ff:4b:5f:59:ef:c8:ed:84:d7:b6:73:39:22:1e:40:9d was issued on by Let's Encrypt.

With 13 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=stonefamilyfund.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d8:ff:4b:5f:59:ef:c8:ed:84:d7:b6:73:39:22:1e:40:9d
Serial Number (int): 335177193545347420342464035414219262148765
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 4d:e6:37:2b:8c:f3:a4:8c:21:b4:ea:7a:fb:80:a3:d9:97:89:b5:e4
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 88:2f:b5:f3:0f:c8:e2:f1:23:d0:a7:53:d5:72:e5:57:50:9c:e6:f6
Fingerprint (sha256): fc:9c:1d:90:55:97:0f:af:00:c8:c1:c9:a5:d9:17:8c:10:05:2c:95:bb:e0:af:16:c3:58:2a:33:97:da:29:39

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate stonefamilyfund.org

13

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for stonefamilyfund.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aigavin.com
boattoursagency.com
hempseedgenetics.com
houstonprivateschoolguide.com
ileifaorisha.com.topsoilorlando.com
lovewell.com
moscowforvip.com.jacobrawles.com
pfizzby.com.polkalinked.com
steuerungsbau.com
stonefamilyfund.org
urbanfaithblogs.com
www.flyoverhealth.com.alluloseinsidecertified.com
zombietj.com

Other certificates including the domain name stonefamilyfund.org

(limited to 100 certificates)
stonefamilyfund.org
stonefamilyfund.org
stonefamilyfund.org
stonefamilyfund.org
svenskarnashus.se
elizabethkeogh.ca
stonefamilyfund.org
stonefamilyfund.org
equa.life
manutenzionefotovoltaica.com
stonefamilyfund.org

Certificate

The complete raw certificate details for stonefamilyfund.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtoO5GsVlRBxIIL4CSAt5
BKzDdxRsl3kjenCIKA9eF65oXI0itHXG7qm9XvJgRC4Kl+RuogRaDfnP9uavdqk/
QEp7RXkZfh9m+7P9D8PQvT6Sxf2oqreOJglMe6pFMEnMrwOfuDC747eGGFKMdtML
UvjHEj23QmqK5pmTRdkAiv0Ts+6AdRLxc1sqWR7wqwbbavFtInVrnKHV+NPthWp9
Cox75QCUlgTqmmfFBKngfS/e/VWn3ZX1l5pjkiNUvmwSZAzIOzoW7Heq9APVEHxB
jAEReaUoLCmUq/JyOxvDtvi+BIMXOy+6UDBzUna4m1TiVb6NLR1uHE8Gif0f3T8C
gwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 335177193545347420342464035414219262148765
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-20 19:10:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-19 19:10:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'stonefamilyfund.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23040326567956432048373886271482046328923525649350977546215851465128817011741399152059891241199859055010093213169454778765380369406561611866889943227182494949569505846330247903324308119818919170501355379364764089709945434587336090109128132253591768097128619500576767682855642154472616190978534221553682054640964446866123682680876104211671741640746387460764719334307467938024563177499316241931205592464700954569231118277483546619911824639882841723869195984733839265071492162459059595378311575659753648875340202042281146471866562077455497313951147331666792071026377864411129243176952163518172853763090995139007567823491
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4de6372b8cf3a48c21b4ea7afb80a3d99789b5e4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (331 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aigavin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boattoursagency.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hempseedgenetics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'houstonprivateschoolguide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ileifaorisha.com.topsoilorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lovewell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moscowforvip.com.jacobrawles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pfizzby.com.polkalinked.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steuerungsbau.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stonefamilyfund.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'urbanfaithblogs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flyoverhealth.com.alluloseinsidecertified.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zombietj.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018c88d97bab0000040300473045022100b7723a364618901095b960eb4d493ff9758dfc801d6b7e9eb50cb348f7175ac50220771206ce2c827fb16253af1aa2af29df2dfe23f1505e1b804094ce63552a41ad007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018c88d97ba200000403004730450221008389e53b7a4b1c702172dfeb9d0b77748144c2f3c128ce6e1d27818a7f4b309e0220218ad6652b1e66bf3cf4df466847af1e5126977d97339ec9d46a6477710401d5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00baa315fff743b2a28d511cfc8ea87403c83891be51800c40d5d3c6405d64f266c35440ea7be237c9ff3796bd2fcbc0fecb484a3f911830afb782f2e96bd50415af00fd12e3e348b1eb82b01f2ab5ad77c1128a305d8b1e5aa63b871dfb0a62a40e9bc30c2c25e73c6d4b5f262da1bcaac2f1a2e633737ef742e357b0b7c3b76c09571d8b1e8c82ac9e50eed2ef1ec42da69b699e19ffa3d3344247501dec81157c8b77000a7af9cc0362217e1fa04cd0fbf93d4749583771a8f93eab5807d17d5f6fc132ae3b4e472e3e28f40b4e106f9a87161746d6d59364bd1d4fd46c3a37a83314be8d969dc6c411aaff6e629e5c86db6d6bd140cae23923bd87d611e95d