biblecourse.ca

Issued by R3

About this certificate

This digital certificate with serial number 03:b9:88:ce:c8:41:c5:39:45:34:41:63:75:f4:fe:de:7b:69 was issued on by Let's Encrypt.

With 13 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=biblecourse.ca

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b9:88:ce:c8:41:c5:39:45:34:41:63:75:f4:fe:de:7b:69
Serial Number (int): 324470944357926751490077415419518090378089
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b2:56:32:76:6c:6f:50:42:30:c8:66:4c:c2:6b:09:70:47:f2:cc:99
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): b5:10:eb:3c:71:66:5e:b2:b0:6e:8e:61:7f:bc:62:9e:45:fa:cb:a3
Fingerprint (sha256): 11:71:05:30:00:f6:86:0c:e4:66:08:7a:a1:df:55:6e:49:16:2d:12:9b:72:4b:10:3e:a6:68:90:e4:6c:72:36

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate biblecourse.ca

13

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for biblecourse.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

behinded.com
biblecourse.ca
buysellsportscollectibles.com
designphilosophy.com.satxopenhouses.com
fortworthtxchurches.com.webgraphicsdesigner.com
gasfireplace.xyz.jameskrogers.com
iproject.in
lagunadelmar.com.thermaldistillation.com
pixelworkspublications.com
poweredbyallulose.com
qualitypadlocks.com
softhemp.com
twincellars.com

Other certificates including the domain name biblecourse.ca

(limited to 100 certificates)
biblecourse.ca
biblecourse.ca
biblecourse.ca
biblecourse.ca
biblecourse.ca
5272653.ca
biblecourse.ca
biblecourse.ca
biblecourse.ca
biblecourse.ca
biblecourse.ca
biblecourse.ca
biblecourse.ca

Certificate

The complete raw certificate details for biblecourse.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZDp7pWH7hNThrxGIC9I
+369wmp35tU+9RgpFDv9gaQfz1ZJ3iuxRiX3PyHMqpW4xSK73kgqgMVH32xQY8bO
s7AXTCgwH/Yadu6IFsb1JNwHltr5KcfW9w6mq1Ru3BCBAudqwajL8XtxM0ZFC2vZ
f+Ue/aaQbqoX8WlZtamUZ57N3nf/qjPFhOlePAusFOc8eSrw55SfsHeqcSTYZ9O8
G8VKrkYlR/eq1F4fDVEwInkmrJKg2HCwU876MZWjxZhB0eX2drR/Awi4yCb6GCSr
pE7aL5wGFNkz74VqNigpNCe97anBU9HLdxvXzX0XrUgmACdYHoKdT3kftgXRfY+C
twIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 324470944357926751490077415419518090378089
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-25 02:33:50 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-24 02:33:49 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'biblecourse.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23930499295102613808971241583675776122433201059234512131917331094587404082122777453721217756976094404904985025285803920331884501131097785593660490068799690546778291765528277606906420449067402727143701141819743393857283351988482505610758317904525648496550870384406965020304714607185687642378449847113778991744510657405112552069632173129992205112568200245950917188983134777991067183851650026935276180629652985702613933785928395562162172077979582807947502191452370212018392613829888248344157274865268193553351069752144634388396938623633520002719525348953224431042328844560758050822734695971032179169561985714598286688951
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b25632766c6f504230c8664cc26b097047f2cc99
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (348 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'behinded.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biblecourse.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buysellsportscollectibles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'designphilosophy.com.satxopenhouses.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fortworthtxchurches.com.webgraphicsdesigner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gasfireplace.xyz.jameskrogers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iproject.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lagunadelmar.com.thermaldistillation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pixelworkspublications.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poweredbyallulose.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qualitypadlocks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'softhemp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twincellars.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c9f0938ee00000403004730450220356df2a3bc540db11f399c0e4a0cc3da76c66a4b269502a2117a2b82457aad7a022100983c30906ad5887193e7ecdf778fb067fbfbe24e6892affd8ba7c6be028a16890077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018c9f0938f30000040300483046022100aee045b6cf3e0fdd3e46f3f8cb8323e5210f636065df422986c6bee3d1b17c0b022100c00002ea301ce1f84a7665417cf89c20b3c14fdfafcc2118a14aa18653074078
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00619d284eaa91ff1ff52479011eb413cae22d612ac88ab33fe09d1f25a8ee46190b0d0f9039fd5d76959f868134d2d0f0341dbdfd7e024752eb024009a50adb0eb14a3abee0ce2c0e4cba5d1809d2d51edb5649873fbdbe190ba2eb1d53f3d114142ec2171fe77dd9fa0acca96f04f83d7f6d84f4ee40760a0445aaf0900412d1f3b46c36da0a5060747e480f772c2da58d96ececb97c39f05557788f8cdfae3410c5391e60970e91010d01c5da3ae5b3b663feef4b1c1c4ee19e4b01c723986e1523b5e59bf70a419c22f5038aca3177cd4d7062a5dfc1e4d33690cbf0e418d3d7a2a6ffd9014cdb7df45d3dd82ee332e4e59f156b23c4ffd81d84d3b72604a7