www.legendsboardgame.com

Issued by R3

About this certificate

This digital certificate with serial number 03:43:b0:d9:7a:ec:4d:81:e2:e8:48:0f:20:6f:97:e1:15:6a was issued on by Let's Encrypt.

With 30 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.legendsboardgame.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:43:b0:d9:7a:ec:4d:81:e2:e8:48:0f:20:6f:97:e1:15:6a
Serial Number (int): 284370849727835869610741069775135089694058
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 7b:6e:79:0f:30:05:51:6a:c1:fc:f4:03:40:b6:34:08:2e:2d:98:9c
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 55:ec:28:02:b5:23:57:b5:bb:e0:22:3c:00:3e:03:6e:93:c4:cd:58
Fingerprint (sha256): ff:bd:c8:32:b1:ea:be:5e:fd:8b:5d:ef:ae:ab:8e:b1:38:cf:68:49:4e:b2:6f:b4:ae:2c:01:ac:15:02:ad:b4

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.legendsboardgame.com

30

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.legendsboardgame.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

arbbridge.com
cybersecurityroundtable.com
emeraldhealthcare.com
germfare.com
hijabibabe.com
jimboatwright.org
lcloud-suppdevice.com
legendsboardgame.com
murfreesborofirewood.com
ofmiddle.com
synchronizing.ca
tradice.com
usdawire.com
vasaline.com
www.arbbridge.com
www.cybersecurityroundtable.com
www.emeraldhealthcare.com
www.germfare.com
www.hijabibabe.com
www.jimboatwright.org
www.lcloud-suppdevice.com
www.legendsboardgame.com
www.murfreesborofirewood.com
www.ofmiddle.com
www.synchronizing.ca
www.tradice.com
www.usdawire.com
www.vasaline.com
www.xn--9dbimjb2d.com
xn--9dbimjb2d.com

Other certificates including the domain name legendsboardgame.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.legendsboardgame.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyjw+dMNtq0bkSqno6jqW
z2AeFg6VKZWxrQtdi7tqVBdhXF1fSVZghWUKOXzbOhFz8ETo8TQWG4Z/zWLgS/C9
0xUvI+9HBuAUN4FDo1XfT1UHymUjP2Ndgz+3SmnxrXL6NoZ9b+HFjIMvl70UV2Jv
jEzIdWWBcr6GDxhg2apg2PiVSQx+T0MT1CkfW5rC29GfUDs6Y9ahfA0asMmUgQuf
Fy7Z5pzRi95TuM2133vzcxySYdv82qSJRUCkL2kItXCwerLLz6h6Nrx/ILao3qVZ
QxxB32UFEa6dt9qyEjSQIRKC7Rozgt0v5coMlLqF/mAA19SZ/d0+9GpT1V46xZVL
IwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 284370849727835869610741069775135089694058
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-13 04:01:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-11 04:01:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.legendsboardgame.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25529845011550842454019421394233437410806711704826408388062365833301227595413233659911892404172268683096946679757193717225433881187095299794688491026346038195635591730129757969457291079188806319300234044970280673376960889857192075477868089769574396600259715839660837086441709826347131872961235341989644977050316090832465230764570773413445499779978592064448994848609012851309911414564925626491731890734344058579797045507470686108971556956912317220442070087250449082442380260408534495046237523505274695694665662952677720206319368285729693417352456464488084302491762351518053073272481077667992676255267040388204039850787
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7b6e790f3005516ac1fcf40340b634082e2d989c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (622 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arbbridge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cybersecurityroundtable.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emeraldhealthcare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'germfare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hijabibabe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jimboatwright.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lcloud-suppdevice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legendsboardgame.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'murfreesborofirewood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ofmiddle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'synchronizing.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tradice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usdawire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vasaline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arbbridge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cybersecurityroundtable.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.emeraldhealthcare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.germfare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hijabibabe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jimboatwright.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lcloud-suppdevice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.legendsboardgame.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.murfreesborofirewood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ofmiddle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.synchronizing.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tradice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.usdawire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vasaline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--9dbimjb2d.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--9dbimjb2d.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb499000001894da00acc000004030047304502205ec3754526ecf8cd49760fc127c5e6efd14e4d783ba15f2a752922a9ea7f9acf0221009c7dc7d5be5628337b75c11587ae778e15ce5e709d1fd50d25b16ef4b9b947c30076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb52000001894da00aec00000403004730450221008b33accb28175aea934bb4c24f444f4dab6a519f4373227576f1f191c7cdc6ba02200b3806f456f23b85bbf5741d7f5655a6499825fec0a6553e48faeaad1ff05e3f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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