abbigail.org

Issued by R3

About this certificate

This digital certificate with serial number 03:2d:6c:da:b5:04:22:29:94:12:1a:a3:e6:18:d6:4c:1b:2e was issued on by Let's Encrypt.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=abbigail.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:2d:6c:da:b5:04:22:29:94:12:1a:a3:e6:18:d6:4c:1b:2e
Serial Number (int): 276794256522426525968966321158591869623086
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d9:81:b7:37:0b:af:ec:dd:4c:34:da:e8:26:a8:59:d0:be:d8:b7:2a
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): e0:26:8f:4a:6e:7b:3d:7c:13:d1:0b:72:5b:19:ce:f6:89:86:28:1f
Fingerprint (sha256): ff:6f:71:3a:e3:74:be:40:a0:93:4e:13:0e:bd:70:74:52:e7:4e:6c:2e:25:3e:05:04:44:2b:8a:24:55:fa:fe

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate abbigail.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for abbigail.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

abbigail.org

Other certificates including the domain name abbigail.org

(limited to 100 certificates)
www.abbigail.org
abbigail.org
www.abbigail.org
www.abbigail.org
abbigail.org
www.adelynn.org
abbigail.org
abbigail.org
www.abbigail.org
abbigail.org
abbigail.org
abbigail.org
abbigail.org
abbigail.org
www.abbigail.org
www.abbigail.org
abbigail.org

Certificate

The complete raw certificate details for abbigail.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 276794256522426525968966321158591869623086
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-15 02:36:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-14 02:36:14 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'abbigail.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 754569563913636800365335515732180807015103289441701798104407322272934950690077794761822279308759041939551160427433887721219794857717819607498019686403617329006502535758099281754853277995902060113352961668298391873610949027750540826235169278539386204243880105522875240935994900358758963586784585492509820990713583261518074100880589711201204387221201803065736947630296058555799418953955115851263385038950177940224907440885855202267869700754838530633403432425190719013586020808495299955084210302392785795792504555504878010602873296719243176110444897170444786875790219768655788355763082203218322721919920210405502563276996219830843362224843547248950119896502905863884232934716483973218816714714617422257094794786370117334073585666883687079757727324155397744234553977143362790957544397458342560263586629236538050536788834172800490518427070377217920991960557485658933613089380977080526619827834473278200180264853953321801928192239025705970018512610718058741785227393114102853997588281003640457918471630940570559276879336741087701630055885335771853210522560699372591852954620026527512713560565982946919271467484828725025511510997708975811660013634459065774784964380902535339171916365239008417127507362075063389013009072097880465829083206689
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d981b7370bafecdd4c34dae826a859d0bed8b72a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abbigail.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018edfd3afc6000004030046304402201abe711f54fe526b9b8acc58a665963a161c972210e7e09f5e741b144386790702205a0e62f4b99aa2e832a09dbc84b08ead6973bfc236821cd26b1c61a774583a0e007600dfe156ebaa05afb59c0f86718da8c0324eae56d96ea7f5a56a01d1c13bbe525c0000018edfd3b0380000040300473045022100f39051f27560c02e91d20f464383bdf50d620c86e10a7320cd4367cb4811198e02206b56fc050a8478b6affab685064bf05c23211a63e259c3df275aea5ed86f7b63
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		000ef01031f777a534fada0c9e45cf4446b3688c89e6b4e1d73af3ffbde3f5bcce89db24e0ec1a6338fa1c236d9f888a55908cd4e04637eb97c05740a1609127a118e9f3fefeaa8ba54aa45ae9351ef00df212f398703d5d0ea80995a7ef4a410bd00052e965700345379cada7cb6b624e9a900f729c097f1fed5622c99fb390ef2bb282deb66e77799275178d9157f2e0cdb193ffcb0495b859563792e72d73d7a70b7245f0c2e74e02d3a7c0150db5b1ce58f514cdf11c28da03dc90ca5d62bdd9fcefff8477b972ba76b8996778d202b1c407d2233f0dca23e5bf9776737ec587d81173d0d34452e52609a6a8c584e2d803c67f4cbdda525048e735602714cd