safeministrycheck.com.au

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:b0:6a:b2:54:4f:49:fd:80:b5:6d:16:6c:1f:7d:82:0a:3e was issued on by Let's Encrypt.

With 12 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=safeministrycheck.com.au

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b0:6a:b2:54:4f:49:fd:80:b5:6d:16:6c:1f:7d:82:0a:3e
Serial Number (int): 321368378479764260208397461438720842533438
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 79:af:b4:b4:61:1a:45:b2:ff:bb:6d:c1:58:1d:9a:40:ef:30:f9:e7
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 0b:fb:9f:87:64:d0:b3:96:af:6c:85:93:c2:fa:a3:c0:b8:60:a6:68
Fingerprint (sha256): 03:44:7a:ae:6c:e2:19:cb:74:73:dd:ed:55:9b:b5:f5:2b:02:89:55:8c:2b:39:b2:7b:7d:82:f4:96:d3:10:b8

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate safeministrycheck.com.au

12

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for safeministrycheck.com.au

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

autodiscover.safeministrycheck.com.au
cpanel.safeministrycheck.com.au
mail.safeministrycheck.com.au
mail.safeministrytraining.com.au
mychurch.safeministrytraining.com.au
safeministrycheck.com.au
safeministrytraining.com.au
webdisk.safeministrycheck.com.au
webmail.safeministrycheck.com.au
www.mychurch.safeministrytraining.com.au
www.safeministrycheck.com.au
www.safeministrytraining.com.au

Other certificates including the domain name safeministrycheck.com.au

(limited to 100 certificates)
safeministrycheck.com.au
www.tests.safeministrycheck.com.au
*.inc.safeministrycheck.com.au
*.safeministrycheck.com.au
safeministrytraining.com
*.safeministrycheck.com.au
safeministrytraining.com.au
*.safeministrycheck.com.au
safeministrycheck.com.au
*.safeministrycheck.com.au

Certificate

The complete raw certificate details for safeministrycheck.com.au in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3PqyuivADIS5SZsC+214
zaaR4Zhu/C/VFmq3N+b3tEL7Mprbjvv1Z3ZGpslFtG0PdIFAQbrY6Qkgz21XZkdd
eaQxDFCPloljnRYHswKRG9Z5prgAGYMmuWLQeut0WvDTPcUWICgFqD9XpBvPQsAB
88EDUz0b+2kK1oosctgaJFX7NswmamSh18LyoFQztAkrMOFdDR0cSr87g4SeUU3j
SLwzvt2Ksln67Sf41kIenuTeH8MbVwVyvSuUGStDJnWUzM1b0yaIxy8JNPhaZVk5
CYzDAy1lyTttycKn/kvM08Y7+bODR4X4GtYphV9XbI54TILBuVbmGkOjX3QhVzHS
rwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 321368378479764260208397461438720842533438
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-25 08:39:53 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-25 08:39:53 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'safeministrycheck.com.au'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27896050959421380946614058877475168432495796369204731334746576668665551958718393437374698900149998731591444857290747597486189479582048609765345344096145716212582159861281231867892913867612056584025199884963063721693777456487434111367613733450411721875579822238608784016297953629473805946165866703570747832347992727446243070754551466247205691876334148869293729503587763624324420210449939552497047689612258135594301781243426358024972238834529946967464309695714766473985007462058024976576568519336430492639257174190110849056900384537684778124637550369078282287169857328499175407224698469420792187233616776555898057380527
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							79afb4b4611a45b2ffbb6dc1581d9a40ef30f9e7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (407 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.safeministrycheck.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.safeministrycheck.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.safeministrycheck.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.safeministrytraining.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mychurch.safeministrytraining.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'safeministrycheck.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'safeministrytraining.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.safeministrycheck.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.safeministrycheck.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mychurch.safeministrytraining.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.safeministrycheck.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.safeministrytraining.com.au'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d913000001707bb7936c0000040300463044022010528b7f1408e7ef77ce2058878183ef691c57654223e9b7c104c43114344afc02204a71c18e9aa086bde5d96fb515affcacd4e805fc147c266345b5be170487402700760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c000001707bb7939c000004030047304502204eca2c9d188a7f200671e0de5ed3a153e2e1914c2bd22187a50c9ca3b7fa798d022100dcd2af7e385c4511ab605a8de205e7ecf20bf5638e1921b3e14c34d6b611f0f5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0048849678c8eb8a202598625f1263c7508ca20e278547fa07922a46dfbdcd5050c36de6f56f3aa0f7cb6db5858b33d916959800be9ea0e17c9b420c9fb788a0e1d51d4f842797a5f2fabc3a999599b1166d5b752e2f46999f6fc51e0becbddb71aef68c2c5f30ea037b08609b3e02c23601f77209c49cbfca8a9e94f8730b82f80863ea9365e0adf9d1b1f1fd7302f28101606a40acaef12ef8bb8435c0134189c341119bbb8d1e647c4f7641199046fbbf4cc3a971c546ac23fe8da44f13ff3497d4314205908c8a5a0fa5a20400116681efe5a6b055a69f95de0c9dfed4335c805581534b4d97ab4a326357c2e4cc04fae6f3dd897c209ef0364540e74704bd