www.abundantprayer.com

Issued by R3

About this certificate

This digital certificate with serial number 04:2f:78:e7:ee:69:2e:fc:38:99:47:d2:fd:2f:94:d9:98:12 was issued on by Let's Encrypt.

With 30 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.abundantprayer.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:2f:78:e7:ee:69:2e:fc:38:99:47:d2:fd:2f:94:d9:98:12
Serial Number (int): 364603126587940589779338543419071030466578
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: ff:6d:87:7f:7a:a2:f5:c0:e8:65:2e:a9:c7:6e:1d:86:b7:ff:fc:00
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): bb:3f:7a:4a:85:ff:19:65:59:85:20:08:bd:02:68:ed:ae:8b:18:2e
Fingerprint (sha256): 02:2e:9f:b7:b3:d9:0d:4e:c6:de:ff:80:0d:0d:07:57:de:5c:fb:c5:95:62:d9:31:b0:dd:98:79:f1:03:bc:c8

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.abundantprayer.com

30

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.abundantprayer.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

abundantprayer.com
betterbusinessmail.com
cctradio.com
clintiger.com
codexdao.com
daotaolaixeoto.com
goodqualityleads.com
hotdatefinder.com
ifostarter.com
keywestmarriages.com
lookscasuallycool.com
mikewengler.com
planetaespanol.com
propsetter.com
psybach.com
www.abundantprayer.com
www.betterbusinessmail.com
www.cctradio.com
www.clintiger.com
www.codexdao.com
www.daotaolaixeoto.com
www.goodqualityleads.com
www.hotdatefinder.com
www.ifostarter.com
www.keywestmarriages.com
www.lookscasuallycool.com
www.mikewengler.com
www.planetaespanol.com
www.propsetter.com
www.psybach.com

Other certificates including the domain name abundantprayer.com

(limited to 100 certificates)
www.abundantprayer.com

Certificate

The complete raw certificate details for www.abundantprayer.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6EdGEptypNZzIq4a+uM
95mzDBl2S291XZYOiFt4hOAT4GWS62MitCPFrwEvxXFigVpMaxOM0qZV6kCxvIwI
/0dWGWQNstPUjKrevPWA5wYkFysLMZfHVuPdIPrNTIQgQDDEXsZVlrI1wrTC3A+C
s/cJ/t43HWDjl4CzGvsbHR5YS57l0cqiENkJlx5iTh2os+OrlXAn7T9avULSHypI
70kjxTVcBMgKZzdM72pyqN8TPEcfosAoA0E7oRQz/9cVuL/hOMK8Z6ELdKyv2+fW
zopDlUDPYLnRbtC4SyErKBZ4RhZOBLEV0Oe+550/fXiHz7NEzezR/gM4JH2HSnrr
ZQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 364603126587940589779338543419071030466578
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-14 05:18:06 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-12 05:18:05 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.abundantprayer.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24190964351339070668809457708991876243928196863387281534765914697218365833123600105531190238769659495635804481281558348490562782339861257002138091729701753527594026075307273854654542953451625428569019821842605390265411096994599788175979749926717766651350750286448210354472094022534624027410208855277657012507276445260229772061033846710313650091145366576696385390463076062054725191598609792184924141916843764552686572205699090381371460524814327799648111041639787484523061095446712207543590411871214614685249586319909707306048251697248761357390015660077595673321921513444296057109086323733362927797579474778313381833573
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ff6d877f7aa2f5c0e8652ea9c76e1d86b7fffc00
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (614 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abundantprayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'betterbusinessmail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cctradio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clintiger.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'codexdao.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'daotaolaixeoto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goodqualityleads.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hotdatefinder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ifostarter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keywestmarriages.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lookscasuallycool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mikewengler.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'planetaespanol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'propsetter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psybach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.abundantprayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.betterbusinessmail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cctradio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clintiger.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.codexdao.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.daotaolaixeoto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.goodqualityleads.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hotdatefinder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ifostarter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.keywestmarriages.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lookscasuallycool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mikewengler.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.planetaespanol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.propsetter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.psybach.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000189530cabda000004030046304402201eb3cd57868e3816785c04e85dccbbc8e90bbe6bab3f1fb01836d10bb1af598c0220499213ec6aee9b964230909fd14fd791ca72b238347378f75c5a944e95534f02007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e00000189530cac670000040300473045022017b7658a7a75acbbb47722fbf7ec37d440f91d5ab2107bee6b7c40f5d4804aad022100fd656fd4476e4be8546dbb186846ae41507b8f51d076f93f6171b768f9bbd7c5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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