DV SSL/TLS Certificate for waiteparkchurch.org

Certificate is witin its validity period

Issued by Let's Encrypt (R11)

About the waiteparkchurch.org DV SSL/TLS Certificate

This certificate with serial number 05:02:43:97:3a:43:35:b5:4e:db:f9:0f:7d:8c:4f:e3:1d:4e for waiteparkchurch.org was issued on by Let's Encrypt.

With 2 subject alternative names, this certificate can be used to secure multiple FQDNs. This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for waiteparkchurch.org provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Let's Encrypt

Organization: Let's Encrypt
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 05:02:43:97:3a:43:35:b5:4e:db:f9:0f:7d:8c:4f:e3:1d:4e
Serial Number (int): 436331837886891004076251555966798799248718
Serial Number Length: 139 bits, 18 octets

Subject Key Identifier: 0f:c1:f7:df:f7:63:82:bc:6e:d8:f4:9a:42:db:96:92:d3:ed:84:31
Authority Key Identifier: c5:cf:46:a4:ea:f4:c3:c0:7a:6c:95:c4:2d:b0:5e:92:2f:26:e3:b9

Fingerprint (SHA-1): 8e:ba:4b:58:e2:48:09:8b:48:b0:64:cd:99:5d:6b:7f:da:d9:da:e3
Fingerprint (SHA-256): c5:b9:ad:51:50:42:61:c1:21:02:67:3d:fa:d0:af:72:bf:6a:c3:72:40:55:37:e7:8f:76:f8:be:c9:45:1e:d7

Issuing Certificate URL: http://r11.i.lencr.org/

Revocation Information

CRL Distribution Point: http://r11.c.lencr.org/79.crl

Check the revocation status for certificate waiteparkchurch.org
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for waiteparkchurch.org

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

X.509 Certificate

The complete raw X.509 certificate details for waiteparkchurch.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1D039LgM+22Eds1DTtFJ
bBnoe058S/QRhMzxS5nYuEvwKaKl1USkAqvq/l8yV5pxwIwwWXPch7otueTlfkNc
uytdyAodohikU+t9kDIiOoGe0q4NogEJe0g0cCX2YPk0gMtIpGm0F7C8+IF37Ox5
b6/sj4b8K8cotJEVbACMANPjtqdZMHp/vci11ap+/16VceYAKoFQ0z2hARFQx6BF
EYaDD4O7maGJpqsoR8RsuJt9wvBnBuPhCkEIZHiefpoSjU8Xq7dyV37o0QbVOOLn
yyZ8tpqwQGqW+5FlMUwkX4o8wa4QijCqDJAbrEPgXkpFUEahMrlZDhuE4Sw0/NUJ
GQIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 436331837886891004076251555966798799248718
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R11'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-06-20 22:11:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-09-18 22:11:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'waiteparkchurch.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26792708658671951768290506645825493249737559072624795531047762603230099261416718657000406192734001096067141721346670974583424516493729474796566361295329698303719243660372959753822023263953360005613297432094883755663214237746280271313160914342551741150700371579168609403967576616957362473903895710956050815618350849432635309889885796935946310283743725890519016051849807391556164882629867717649714419353242942206816434695237945602377589667005039573151296321278718256027426681307670719805719879346898396095687814024322088966955965194124190269434539600750767567338592630748449704492098025328492046866828991818637170247961
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0fc1f7dff76382bc6ed8f49a42db9692d3ed8431
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c5cf46a4eaf4c3c07a6c95c42db05e922f26e3b9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waiteparkchurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waiteparkchurch.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.c.lencr.org/79.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500ccfb0f6a85710965fe959b53cee9b27c22e9855c0d978db6a97e54c0fe4c0db0000001978f9b985c00000403004630440220041809505d7bfc920f075e2aa6ab5752e1ddcbc058b3baacff6e8541fa25fc2d02206003adad995e121991703aa92107445ee45509501b6977f98d12dc4eca24d06d007600dddcca3495d7e11605e79532fac79ff83d1c50dfdb003a1412760a2cacbbc82a000001978f9b989a00000403004730450221009d8d429626888b5873e07a9a75e2876e683a38ec9c4d17161e971f7dac8aeaf702206f5203d32a3938a2ca5d8fa5177c239b38eb4d12f519d5522fa26437e9b39abc
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		000da557b585ca347559d100e4d0334d083baf0b55e6fbae8a07990087e29691da77b8c2ac37c76fab1cd3c6f948cc686da4d7155f503bf5cdaf0c998454bd3d9033391ecdcc6e11da12ed4c226e92d2bf66616f60eaf7a66c9254228215b005eac21af9168d01ce1960d4f63c9e81fba4bf5c110653df7b0ce5c4652fec1e73d3bf1e08e61cdd8a269342f8da1113372a8cc1ef9509b402d88bf1a3f3d66955c4e62d8866c546363015d509167ffefe67c0c63bdd7424ae053833345182195f53f6eba889ca3d76634655ad611ae8131540d6539f86dbac7f8bc61445853bbd648e4219e4dda966767fbbef12435ec388b853f917f9679b606c93dd1691671966