DV SSL/TLS Certificate for www.jubileefamilychurch.org

Certificate is witin its validity period

Issued by Let's Encrypt (R10)

About the www.jubileefamilychurch.org DV SSL/TLS Certificate

This certificate with serial number 06:e4:e5:81:f5:8d:bf:b9:8d:c0:2b:29:7d:30:a1:a7:82:c2 for www.jubileefamilychurch.org was issued on by Let's Encrypt.

This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for www.jubileefamilychurch.org provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Let's Encrypt

Organization: Let's Encrypt
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 06:e4:e5:81:f5:8d:bf:b9:8d:c0:2b:29:7d:30:a1:a7:82:c2
Serial Number (int): 600563163246285806043773449944197518295746
Serial Number Length: 139 bits, 18 octets

Subject Key Identifier: 51:e7:33:fb:5d:87:c0:a8:3e:7c:1a:01:aa:8f:41:bf:5e:2e:5f:30
Authority Key Identifier: bb:bc:c3:47:a5:e4:bc:a9:c6:c3:a4:72:0c:10:8d:a2:35:e1:c8:e8

Fingerprint (SHA-1): e1:f2:28:c4:c4:9b:43:b6:05:df:06:8f:dc:18:99:6c:8d:96:9c:4b
Fingerprint (SHA-256): 37:cf:8f:29:e4:73:b9:bb:52:67:d7:7e:c2:0b:71:cd:68:9e:22:57:06:41:ba:74:82:57:82:24:27:20:6a:d2

Issuing Certificate URL: http://r10.i.lencr.org/

Revocation Information

OCSP Server: http://r10.o.lencr.org
CRL Distribution Point: http://r10.c.lencr.org/67.crl

Check the revocation status for certificate www.jubileefamilychurch.org
1
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for www.jubileefamilychurch.org

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

www.jubileefamilychurch.org

X.509 Certificate

The complete raw X.509 certificate details for www.jubileefamilychurch.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgISBuTlgfWNv7mNwCspfTChp4LCMA0GCSqGSIb3DQEBCwUA
MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD
EwNSMTAwHhcNMjUwNTAyMTA1ODI1WhcNMjUwNzMxMTA1ODI0WjAmMSQwIgYDVQQD
Ext3d3cuanViaWxlZWZhbWlseWNodXJjaC5vcmcwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDAsEuOQavXnyhCQJ3j6/8MGVr3C4HpyHj03+M7ugf0gX3h
OtbAeppt0D9he1yp85VVSVe/fBjZUw7FkiILXS/ILlC0Nm9Obqj4LL+74vpv1/zd
q8VNlKh1PfFHbFd+Ob82BKLn0CZimJk+EjjBg7txm4ecUD5x9qtmi9ktf3IYu/Iy
T8KYSoippHkGM9+Z4C4qR+sBZAkpzrM+kgnabmc9Lh9SrKI+mV+zydV8qwDfIN6z
ludnZCf5zNl2OykwBP5+Xu5VSZhWDisWXkYCczRw/RkfLSqnydTGcmwT2X/EmeBc
ll85m2Xa0x6aBpNuoxf+poXOYhaY6VpHrzd9TiZjAgMBAAGjggJQMIICTDAOBgNV
HQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1Ud
EwEB/wQCMAAwHQYDVR0OBBYEFFHnM/tdh8CoPnwaAaqPQb9eLl8wMB8GA1UdIwQY
MBaAFLu8w0el5LypxsOkcgwQjaI14cjoMFcGCCsGAQUFBwEBBEswSTAiBggrBgEF
BQcwAYYWaHR0cDovL3IxMC5vLmxlbmNyLm9yZzAjBggrBgEFBQcwAoYXaHR0cDov
L3IxMC5pLmxlbmNyLm9yZy8wJgYDVR0RBB8wHYIbd3d3Lmp1YmlsZWVmYW1pbHlj
aHVyY2gub3JnMBMGA1UdIAQMMAowCAYGZ4EMAQIBMC4GA1UdHwQnMCUwI6AhoB+G
HWh0dHA6Ly9yMTAuYy5sZW5jci5vcmcvNjcuY3JsMIIBBQYKKwYBBAHWeQIEAgSB
9gSB8wDxAHYA7TxL1ugGwqSiAFfbyyTiOAHfUS/txIbFcA8g3bc+P+AAAAGWkNtX
mQAABAMARzBFAiAJENeMz+dLJZYrP3cadUN44xpZ8B5KUnGxxweMb8z8zwIhAMKK
yUOqQY6bFA5L4DNWIcDKoY2aYAwszntdbNmVU5NaAHcArxgaKNaMo+CpikycZ6sJ
+Lu8IrquvLE4o6Gd0/m2Aw0AAAGWkNtZmwAABAMASDBGAiEAo+MaLQ45ny1HxdKB
avFfnphl9Ijx8Wxynk/iU5g/MXgCIQDIpsRZbBMZzJ39QirzWMqRmkP4jxMdDv7n
OzOXIjD8NzANBgkqhkiG9w0BAQsFAAOCAQEAbV31Gm6khJ6dTaLQgGfIfZAEcZDV
8ewfwoT0C7KjL9DdsdBnM1pmGOv9NRgRZVD/1GPi1E+a9q7lJ7H4nkf5/Vg6hycx
Oijw6Rt3wW5cr7zVy/ZUzwiaIn8zSZZqoRuJysTNyj64JFNKurnw4Xv2zrY2rflk
72wxiAUeBiEsGJt80dOEoCwHdDcsQO0C0pAlvWq8wMqiU7sWNmJL7cmI6GOFy/D0
RT0sTGOW5KqCj8CIgTdU5H9TiSLmWppzdmJf42YL/AgUOCtn1zlzw5afagp8h3Jk
T8+AogsZ2Hbup0r5voqdFtYAH9kMjlRfNumfmQ86x4yXK+x4mbuObxwoVg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLBLjkGr158oQkCd4+v/
DBla9wuB6ch49N/jO7oH9IF94TrWwHqabdA/YXtcqfOVVUlXv3wY2VMOxZIiC10v
yC5QtDZvTm6o+Cy/u+L6b9f83avFTZSodT3xR2xXfjm/NgSi59AmYpiZPhI4wYO7
cZuHnFA+cfarZovZLX9yGLvyMk/CmEqIqaR5BjPfmeAuKkfrAWQJKc6zPpIJ2m5n
PS4fUqyiPplfs8nVfKsA3yDes5bnZ2Qn+czZdjspMAT+fl7uVUmYVg4rFl5GAnM0
cP0ZHy0qp8nUxnJsE9l/xJngXJZfOZtl2tMemgaTbqMX/qaFzmIWmOlaR683fU4m
YwIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 600563163246285806043773449944197518295746
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R10'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-02 10:58:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-07-31 10:58:24 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.jubileefamilychurch.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24324688926815955427652820745945547093773807645690067658881811896223946602666126503571241874805833614020265457269031861821658963273216747152259798149608057533912332777578336319364622525555970272375477192540152553047492540597770120706435979428205906252287104144889967481724609354727309098535907407034459930607560467001548656718047896107499056257395328366116750126624436901482918961114892891660392672341350435613946480888434260457021917903114526598420260853604275516705563590682955649988158621033722155972242087876579575732412031842243155574208892950002232676178567205224160589558432041582185049132139890581319468328547
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							51e733fb5d87c0a83e7c1a01aa8f41bf5e2e5f30
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName bbbcc347a5e4bca9c6c3a4720c108da235e1c8e8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jubileefamilychurch.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.c.lencr.org/67.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600ed3c4bd6e806c2a4a20057dbcb24e23801df512fedc486c5700f20ddb73e3fe00000019690db5799000004030047304502200910d78ccfe74b25962b3f771a754378e31a59f01e4a5271b1c7078c6fccfccf022100c28ac943aa418e9b140e4be0335621c0caa18d9a600c2cce7b5d6cd99553935a007700af181a28d68ca3e0a98a4c9c67ab09f8bbbc22baaebcb138a3a19dd3f9b6030d0000019690db599b0000040300483046022100a3e31a2d0e399f2d47c5d2816af15f9e9865f488f1f16c729e4fe253983f3178022100c8a6c4596c1319cc9dfd422af358ca919a43f88f131d0efee73b33972230fc37
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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