bereanchristian.com

Issued by R3

About this certificate

This digital certificate with serial number 03:37:d4:43:69:4f:2e:e9:b1:36:bd:25:06:81:fe:41:bb:b9 was issued on by Let's Encrypt.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=bereanchristian.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:37:d4:43:69:4f:2e:e9:b1:36:bd:25:06:81:fe:41:bb:b9
Serial Number (int): 280334534330854831477952670777399343954873
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: c4:0c:5e:8e:30:73:e7:72:c3:83:70:f9:05:ff:4f:60:5e:d0:21:17
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 23:4d:ed:20:d1:81:24:0e:8f:ef:d1:47:7d:27:8e:51:ce:35:14:d5
Fingerprint (sha256): 0b:be:f4:df:ee:47:31:7b:9d:b2:e8:79:20:22:59:07:c3:35:a3:c4:3f:4f:af:2e:3b:5d:bd:44:57:2e:85:cd

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate bereanchristian.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bereanchristian.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bereanchristian.com

Other certificates including the domain name bereanchristian.com

(limited to 100 certificates)
www.cranburyschool.org
bereanchristian.com
bereanchristian.com
ashlandcityccs.net
www.healthystartacademy.com
admin.bereanchristian.com
admin.cheathamhighccs.net
debusk.greenek12.org
bereanchristian.com
www.bereanchristian.com
www.sttheresaschoolpalmsprings.org
nphs.bpusd.net
lacountycharterselpa.org
www.colegioangloamericanohgo.edu.mx
www.bereanchristian.com
admin.glenknoll.org
www.bereanchristian.com
msdurham.org
healthystartacademy.com
bereanchristian.com
admin.arcataschooldistrict.org
www.saltlakespa.org
bereanchristian.com
admin.arcataschooldistrict.org
bereanchristian.com
admin.arcataschooldistrict.org
bronxdalehs.org
bereanchristian.com
bereanchristian.com
www.bereanchristian.com
sh.iasd.cc
grandcenterartsacademy.org
admin.bbel.bbrook.org
bereanchristian.com
bereanchristian.com
www.bereanchristian.com
southbayadult.org
www.annaleeelementaryandsteammagnet.org
mhs.molineschools.org
www.bereanchristian.com
admin.sainte-school.org
bereanchristian.com
admin.bpusd.net
www.bereanchristian.com
admin.bereanchristian.com
admin.afsenyc.org

Certificate

The complete raw certificate details for bereanchristian.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIF8zCCBNugAwIBAgISAzfUQ2lPLumxNr0lBoH+Qbu5MA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDA0MjUwNDMyNDRaFw0yNDA3MjQwNDMyNDNaMB4xHDAaBgNVBAMT
E2JlcmVhbmNocmlzdGlhbi5jb20wggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIK
AoICAQDupfkm/eM2gZhvmZ7hHH5ISBrm5iq6vxUGBG4ExICvmJFov/NQHPDWmor7
vdJuCX6LWrHSKJ6muf2/ICxpc0vBCNyQ/eZjDtmzeb+wq9pDiV45TOcbld2OeU37
J7qIkdQtCZdbw7Q5IYswmG1eoF0BPCVx+Keqxezl4MjG5p9XJQISaAeABIdDtMWZ
tcO7s5YWK9NP8Ifgg+JFHrOzwVQJrW7Unz4yviKQzZ7K1X9DkM+IPUUrB22dMmym
ph8fPiY39RMuRMXkfY1ecdeRlpDunEwbqcXsNUlq+FhsjbwZiNFhs41ImYTtL/kM
3ypCZq/Im7/z+26Lsii+uD8rp2ZBnSjSopuec97VCD6lIH7xyMfW5HQMVheP5x42
+sRY4v7nXCLKc7mf7eptN+wzvKVkFNRbbQjCNwT/Za/G5hZ+9tvX83E92rPO7e+l
L0DzvoxNyiweBzqkYApgU/bUM558prCewqPFhBToBljeeRPMEk2EZsM/jwJc4zAA
KBdxay5MG4yfYUF01R9MsHmGBHWAh2vjw8aEOR1sqfQ3rI3oWXnJe95KhvbsyI1S
IvmTvIZC+iL6k/aqs88/01pxXz+oEAUhgB5/9HkbMiEyojoxg2sYZGlMIC0bIFOH
/sejBIDePtoSF6M2LLuJ65LKYlrw+PhZREJ5UnQvvskXo+bClQIDAQABo4ICFTCC
AhEwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcD
AjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBTEDF6OMHPncsODcPkF/09gXtAhFzAf
BgNVHSMEGDAWgBQULrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcw
IQYIKwYBBQUHMAGGFWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYW
aHR0cDovL3IzLmkubGVuY3Iub3JnLzAeBgNVHREEFzAVghNiZXJlYW5jaHJpc3Rp
YW4uY29tMBMGA1UdIAQMMAowCAYGZ4EMAQIBMIIBBAYKKwYBBAHWeQIEAgSB9QSB
8gDwAHYASLDja9qmRzQP5WoC+p0w6xxSActW3SyB2bu/qznYhHMAAAGPE73qbAAA
BAMARzBFAiAUJ8rikI6lgQnFH3JLNVk0umZ3kvEVlXtwcqiDwBkdnQIhAJHixsY1
12422apNCtxcDiIzHpgucDwZF3L/ksx1nEizAHYA3+FW66oFr7WcD4ZxjajAMk6u
Vtlup/WlagHRwTu+UlwAAAGPE73rMwAABAMARzBFAiBBq2GhDTcfYI4ynNZQWGiU
EhyAQY2d3Stj6LuCF8jlDAIhAOb5N6EOFJm5onUA9sTgsX2jKf4eBRUamgJnIOg8
r0e2MA0GCSqGSIb3DQEBCwUAA4IBAQAliLB0NR/QjZd5k1y/tij4DWLyIDIWBj68
IrAnB8Eyn37TQ2CMNq2yN4aG8attevw9/VX6k/txG/lHw1w39kQlrTln6YAy2NBk
hmVaiyi8YURHbxUD685JHuZZqwnd3Me2zDkGmjdbxQunpzSHJrBIBWtTwpiOl2ul
Oz+dNY/OSF6g6dY9lZ+pNpfedD/zEGkDJ7fm9z4zRD1Uh1Bf8FdnKysrPJolu+CA
dQdXkx0GuFFMmY/q9YBssjO3sVfB27LTzT1SpnrJOlolVljGcq+Z8FCb6c+m4kWN
6oXXHvJs8RJ6U+dRIEWJLKTdvTobFzfNTw3VWnLZF9RJOtCJC0+9
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 280334534330854831477952670777399343954873
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-25 04:32:44 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-24 04:32:43 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bereanchristian.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 973600256117606173722937906338996479961303965840680292546612083165895467622757728168371167332639822681763889620708527424838918455564640856680619945686318830482051979521890426742042664226906909611143777698484543149976351405788825223228475805904842415582051574115510041730159819772601315759165552317339838189380632409253824569731599582253603719930977490486842413207350637010565770897566845501401238203403949124167136403610955217242714715438568999901279495988110390847441292437755514346245639063310269487925865593552032029002385561950058398086023177253770992281177692436087979909030232859967202286119653009850323150536420840635959336426514406322468934076380089020572903336811488285594810375782746289053289573360537432975970598703055602009382607826313899763008224145687453797371758356522382909289123473236486605839859568751184850656813997004385969753808428410024957643783919643513251950092444947124061809183019103979789664800934618713986015795900220670153184741062307685918919918241199737584343964692916837746166846269188264372843762227285245819474525829226250700665539521491964107093660471746477238611945728415739364228781120424625686729328018981666992704929262128845854397501742440532804613969318408760698205624947477704609388663587477
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c40c5e8e3073e772c38370f905ff4f605ed02117
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bereanchristian.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018f13bdea6c000004030047304502201427cae2908ea58109c51f724b355934ba667792f115957b7072a883c0191d9d02210091e2c6c635d76e36d9aa4d0adc5c0e22331e982e703c191772ff92cc759c48b3007600dfe156ebaa05afb59c0f86718da8c0324eae56d96ea7f5a56a01d1c13bbe525c0000018f13bdeb330000040300473045022041ab61a10d371f608e329cd650586894121c80418d9ddd2b63e8bb8217c8e50c022100e6f937a10e1499b9a27500f6c4e0b17da329fe1e05151a9a026720e83caf47b6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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