DV SSL/TLS Certificate for commongroundministry.net

Certificate is witin its validity period

Issued by Let's Encrypt (R11)

About the commongroundministry.net DV SSL/TLS Certificate

This certificate with serial number 06:dd:de:7f:67:79:1f:87:09:59:af:ee:df:5c:9c:3e:c1:29 for commongroundministry.net was issued on by Let's Encrypt.

With 2 subject alternative names, this certificate can be used to secure multiple FQDNs. This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for commongroundministry.net provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Let's Encrypt

Organization: Let's Encrypt
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 06:dd:de:7f:67:79:1f:87:09:59:af:ee:df:5c:9c:3e:c1:29
Serial Number (int): 598171868815538719676836537869464451858729
Serial Number Length: 139 bits, 18 octets

Subject Key Identifier: e0:52:68:44:3c:24:ba:33:6f:b4:14:d8:2f:91:80:d1:ba:26:39:4a
Authority Key Identifier: c5:cf:46:a4:ea:f4:c3:c0:7a:6c:95:c4:2d:b0:5e:92:2f:26:e3:b9

Fingerprint (SHA-1): b0:3a:dd:02:d1:dd:bb:6f:33:c2:fb:90:7b:09:e5:e8:b5:4d:3d:3e
Fingerprint (SHA-256): 36:f9:ce:a4:65:eb:d9:56:a6:8a:a1:c2:81:00:eb:1a:1c:7d:36:dd:96:8c:de:cc:98:a5:ab:fa:44:c7:ad:8d

Issuing Certificate URL: http://r11.i.lencr.org/

Revocation Information

OCSP Server: http://r11.o.lencr.org
CRL Distribution Point: http://r11.c.lencr.org/42.crl

Check the revocation status for certificate commongroundministry.net
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for commongroundministry.net

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

X.509 Certificate

The complete raw X.509 certificate details for commongroundministry.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1MXIe1jpxeUnXdhVb7Ec
fEjdpBwaMlmw4YinuZoSeO0IF5vsj2A369khom+0XLqV7tg3tMPHYRInxiDZtHTt
8CeTlyvUIU85OA4FBDBUUXlZWV/zE361hqOAQeU0Y8pMFfW3Z5IL0rbY6IsGmyIA
8DHQM/bqX82rbJDzBfTkx5iCxsmKnL3WV4n1zlGirtEbebQDcHpRm/aWmyqeCpps
iitqfe2eSyGHFc0KoZgaEJ/ns0YrLGl60cqvkJTF1uruG4/CW5KVTtrQalH6bVoY
Sa99QuqV6PDyQFnKZ12TWZDDEnpAsOdI1YciHAn+UYDw4zwf6/18lu73ToQui24Q
QwIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 598171868815538719676836537869464451858729
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R11'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-06 07:06:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-08-04 07:06:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'commongroundministry.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26860051150269493095805505629247674111982131769268013935873147700610102472108611685287029021197507695249374417576258754737425841847304572660862264001182152775191727358373186262555157686529778604828906854432712175045297066593834013299395064903015185442544347990200465887963773116782375154460675436087434340610616942823939662582289855871158041937909213655421016100874189230932904647294021444173018921731483491783325858952123820564365772265895100900339883122896162494172836999649546547556742446255651774281158911215972028418184966969889813907939250013590879061810670743729961355103985704496660135886850396557672941752387
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e05268443c24ba336fb414d82f9180d1ba26394a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c5cf46a4eaf4c3c07a6c95c42db05e922f26e3b9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commongroundministry.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.commongroundministry.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.c.lencr.org/42.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500ccfb0f6a85710965fe959b53cee9b27c22e9855c0d978db6a97e54c0fe4c0db000000196a4a050c6000004030046304402205b4f02aa085590b1b4b941c036ad2d79094039e9ea92eb67d00ddbeda281b9970220288fbf9b1896abcbeef198e685da54691fcc14c5ec2a202f36fe2b2ee4c0b20d00760012f14e34bd53724c840619c38f3f7a13f8e7b56287889c6d300584ebe586263a00000196a4a050c70000040300473045022100e0e64cb09ce7b6288f64143385345821dae94683671a4f7c45405f4988429c42022076e4bfeee67ed39b136925ba0b376891954cf9ce61cc08f2259ed298c6251d65
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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