cincy-americangraduate.org

Issued by R3

About this certificate

This digital certificate with serial number 03:ea:f8:bf:b5:de:83:d2:1f:7d:fd:4c:ab:84:62:4e:81:d4 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=cincy-americangraduate.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ea:f8:bf:b5:de:83:d2:1f:7d:fd:4c:ab:84:62:4e:81:d4
Serial Number (int): 341293575615180566577403751208876623430100
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: a3:5d:ce:12:4e:23:b7:00:da:e9:6c:b9:d4:12:7a:9b:2b:28:69:bb
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): d9:54:38:83:1b:05:80:ec:d7:95:ad:36:58:ce:00:dd:3c:51:c1:b9
Fingerprint (sha256): fe:36:38:ed:19:37:61:c9:b4:af:2a:33:71:55:26:b9:15:0d:66:f8:3a:df:57:c1:ae:98:5e:9c:50:a3:38:43

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate cincy-americangraduate.org

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cincy-americangraduate.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cincy-americangraduate.org
www.cincy-americangraduate.org

Other certificates including the domain name cincy-americangraduate.org

(limited to 100 certificates)
*.cincy-americangraduate.org
cincy-americangraduate.org
cincy-americangraduate.org
www.cincy-americangraduate.org
cincy-americangraduate.org
cincy-americangraduate.org
www.cincy-americangraduate.org
cincy-americangraduate.org
cincy-americangraduate.org
www.cincy-americangraduate.org
cincy-americangraduate.org
cincy-americangraduate.org

Certificate

The complete raw certificate details for cincy-americangraduate.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtPO16bXbEebk2P563zS
d2dwhVByNGgEZ3Fu0sKzZ0wS9MX0PmwdTiI3LK1qrBivEMUW/jC+bJjr7j1k7Hew
I59caFQLqHh8yCdkx0ax2FZkqe/PD2KmiVgVElIxLEYfDzuovVfT+VPwQTLX3n4L
wsM/LlquPJ/ppRxLFsIf5ZhfjmIfgvxPZtVVeFpXF3Bum74J+N1W+P8Is5FhB+zn
/Kd20xycL1fIoW4CSGDbFjZwPgVksr0pgXELjGyHqCb2EFeiNqTUGMCzGCahUxCp
uYhutwc2DVu/z2MgNRBfNkQf9xpD6Qukip6ZVUPR9AtuC/D/hiRB5XrIVIqF8H4P
AQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 341293575615180566577403751208876623430100
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-18 06:35:34 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-16 06:35:33 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cincy-americangraduate.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24594677570179570137813010614241224897182485042000065157245129878220744724901810534406222150408582264724802620298583068011339574007868061853931676653834464911582927340826100288421386815913735037468312711064195462901236933318454459069319589267907872503995680609641944463809521115085790694443376479961151406204164693978179973294406499948608035483797582062234622944100235376686479159521275013559700757713444518278075082707310138414875980283355508778949986897919722203320817371897241730971759448784535075492817908637042051439638879074442695580936333336373060334804512946838199451357935327329254633994831573398937237589761
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a35dce124e23b700dae96cb9d4127a9b2b2869bb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cincy-americangraduate.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cincy-americangraduate.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018b41b615d0000004030047304502210088c84c235e95388ddc0e9276eeed2bd599710c40318543af46c3aa4e05396fc2022003040730c875a05b11fc417d394724a994c2c4901a87452531a9217a3d7b697e0075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018b41b615ca0000040300463044022017d4d7d4bf47cdf6e11d50717177962bbea39a9cd0beb46f94394b64c5c921b702200c926f28b72f06af3e7e2d20ad7a6e31e5a2e3b051edc9079ab2f5a5223b5be4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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