DV SSL/TLS Certificate for play.church

Certificate is witin its validity period

Issued by DigiCert Inc (Encryption Everywhere DV TLS CA - G2)

About the play.church DV SSL/TLS Certificate

This certificate with serial number 06:85:a4:ad:cd:33:6b:5c:b5:51:11:0d:70:bd:89:15 for play.church was issued on by DigiCert Inc.

This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for play.church provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

DigiCert Inc

Organization: DigiCert Inc
Organizational unit: www.digicert.com
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 06:85:a4:ad:cd:33:6b:5c:b5:51:11:0d:70:bd:89:15
Serial Number (int): 8669283542048330387252779158991636757
Serial Number Length: 123 bits, 16 octets

Subject Key Identifier: 14:7e:2a:64:d1:21:47:ad:76:ad:7d:d1:19:80:d3:d8:88:a8:5e:6d
Authority Key Identifier: 78:df:91:90:5f:ee:de:ac:f6:c5:75:eb:d5:4c:55:53:ef:24:4a:b6

Fingerprint (SHA-1): 4d:e6:22:4d:37:3d:f5:b6:4d:0b:46:6a:22:1e:78:54:d0:e1:8a:e6
Fingerprint (SHA-256): 4e:45:e9:68:0e:f5:c9:cf:55:96:e6:c2:d0:65:88:fc:c6:c1:b1:93:d9:ee:eb:15:e5:67:ae:9d:a6:58:74:cc

Issuing Certificate URL: http://cacerts.digicert.com/EncryptionEverywhereDVTLSCA-G2.crt

Revocation Information

OCSP Server: http://ocsp.digicert.com

Check the revocation status for certificate play.church
1
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for play.church

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9
CA Certificate
This is not a CA certificate

Subject Alternative Names

play.church

X.509 Certificate

The complete raw X.509 certificate details for play.church in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp0ala3SIbj/IpJzdwyD+
3lniJYIiNiWSB3X0r88BOCAi6LHtXEnibwiohBJYISbZUnfH2Rml3CzJR+ob8DV0
Hq3Muo4Iy5mE0sOeVmNMHkBc7URDKp+IqjbXX5m03+RPf1UeWtyZkrP8LjYECuVr
k+/8if1OC6A6ga49vwO3l4No5EyGmDic8ta5Yv7nKyOPzd1TbRzQ2NNd3mBy6XxZ
PRhwY6Wjwk2OsnZLwMv6YAq/Wya6trKVqa+Ff2/nwU1/2gcx+GwGUl1zjL6kUn1D
9oaXYYalZmvClzk4qX0s92cFi/V9L95ATa5P//2burN095d0Mw09l10QP5xoEKa1
KQIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8669283542048330387252779158991636757
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Encryption Everywhere DV TLS CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-06-28 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2026-06-27 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'play.church'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21116633854585826200491412753697551356365289198453451791147648279617836518492205475509286573475901595809053875214918160877218324643140775449036101477066174583600868494947552154934046165734513772739856601785010472664862463018206924158232542203920254310580492664711524568314201427948260452580518868180099757143536389284484268635958582853245467857583005225744910592869513475130263904624825583047765751315195618398300786221772512470312120515354472250653231120724462715895004896668186927226740650448335932796231710281703092508029445185343420890180541471492519369815299235652308568588530697147390414463865854664206360950057
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 78df91905feedeacf6c575ebd54c5553ef244ab6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							147e2a64d12147ad76ad7dd11980d3d888a85e6d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'play.church'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (116 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/EncryptionEverywhereDVTLSCA-G2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00ae5bb7824ce984f64d6f89739a853539899f7f60d5dae0375b06f08374c893ad49e2df3a065c40f894fe8da5bcf8797c683dacbc39798943734d7eee9425fc296c5258306fba98a096cf60d25d27bc227689873443f6b573bb49529ee0cac85359e0308101b704d3a4fa73f88bb84ecc3e6a87912d59a965535f4ac433a099a73a1056387df8054c001d6a85ec37faa6d904f467349a2839f75b86811c5a87b9409848dc49761ef86b6107520bec5413c79c91f2a42595a16d2e3e50e8714577e5db1313ad892f23507f87798babfb72954b41f0c3b706d61ea76d81d468d53bd35fc663d6fa68d48a5c2181623f052f176f690e0c16b2137f6b51785a1a1087