nw.bible

Issued by R3

About this certificate

This digital certificate with serial number 04:20:5f:9e:7b:7a:c5:f3:c5:b7:1e:dd:1f:3e:e0:5c:91:09 was issued on by Let's Encrypt.

With 14 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=nw.bible

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:20:5f:9e:7b:7a:c5:f3:c5:b7:1e:dd:1f:3e:e0:5c:91:09
Serial Number (int): 359465279015477713253503612861401244930313
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 26:84:ad:35:ba:77:41:de:3e:d2:f8:18:3e:29:1b:4c:93:4b:35:40
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): f2:fb:ee:11:24:c2:e4:b3:e4:bd:31:81:6d:3d:e4:f9:7d:44:de:8e
Fingerprint (sha256): 15:f6:15:15:88:56:0e:a5:a1:a4:f6:86:b7:29:10:53:d3:33:a0:01:da:cd:d5:39:ee:b4:6e:a0:d3:ec:51:72

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate nw.bible

14

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for nw.bible

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

arbitrage4u.com
bestfaithfilms.net
buybites.com
digoy.com
eddrugs.org
extreme-listening.com
jamesdr.com
lakecamelot.com
manictees.com
marketingsemantico.com
nw.bible
soilsmatter.com
truekeratin.com
zenmenu.com

Other certificates including the domain name nw.bible

(limited to 100 certificates)
leaselock.ca
kiesza.ca
dumptruck.ca
allanblock.ca
sale.nano.bible
kiesza.ca
nw.bible
nw.bible
kiesza.ca
sale.nano.bible
kiesza.ca
sexerencontre.be
sale.nano.bible
nw.bible
nw.bible
dumptruck.ca
5272653.ca
usc.mba
dumptruck.ca
sattv.co.za
justwanna.world
1031.trade
dumptruck.ca
yfx.co.za
allanblock.on.ca
allanblock.ca
dumptruck.ca
kiesza.ca
nw.bible
kiesza.ca
azulprofundo.yoga
newsstation.ca
athenadayspa.com.voetbal.co.za
westgarden.life
kiesza.ca
dumptruck.ca
azulprofundo.yoga
sale.nano.bible
azulprofundo.yoga
dumptruck.ca
nw.bible

Certificate

The complete raw certificate details for nw.bible in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzvapnWUv85rajOIDSXg4
ph4LOH8wukCZ7X0hP4B35YIvYJYYibVpj5YHCDwQ4kpW+hLvpc3Wngbo5iMX47+R
jCMzjc4fLjPDdvyLmJaDih34gHadiRPg9k4vwxy2YA4/kzCt/v0SD8rgP7W0ipkY
aNsHHZvRT08490G2G33UOS7LKC6NsUe2JL/ddPeSV9Px5ay0Ng0vuwzknSZo9QhP
4AG7TJgtfb0VZudgrNpmF7Tl59VAGhDvEDeWKctDtX8hR9feuqVpiIk6l4DaW4/x
YyOMUFIR1VTmgq3HsqLta75ggk+c2+n5YCR/fb/qiV2mr+/Lv01eNdOhrc8rnFtk
EQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 359465279015477713253503612861401244930313
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-19 04:51:51 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-19 04:51:50 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nw.bible'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26126724663669371596126396382802794977989785050224582478355033559023980045788013072272125202024918136313803269651796932141126960039337577766312814154688866885841931893926599622480839925933829413905299642281502369823817907479840438399623282124430009867194242214835597462056228800074747203635939617992333911914954868715384045837963836675306627136610622326688226236402949849119889350578333792600193901778415022846393656867142400503837395068034014670083535072711578324463441559043055341978972623178553595557835361400480829053696005642403795425863171821287748267953896587242976860828434447015360514237075135485427157001233
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2684ad35ba7741de3ed2f8183e291b4c934b3540
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (227 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arbitrage4u.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestfaithfilms.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buybites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digoy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eddrugs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'extreme-listening.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jamesdr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lakecamelot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manictees.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketingsemantico.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nw.bible'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soilsmatter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'truekeratin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zenmenu.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018dbfebb4bb0000040300483046022100d35e276d4000ad35c9e0878dc6d1beb0a6ffae32025ffb2dba1f8aec647ccd2a02210093c7807bbb69453e6eecafd4689f60a871b9c8eb80d6dbb3fefcf0631f988e240076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018dbfebb4cc0000040300473045022100c1926a92fcc597f20ddb18689b4a4692fcc7056531e6f20f716bc40ed2ad4a8502205e65ac238c2ecc9e0d2d78cfdd3469fbbb10916ac103316ca770ddc74d9f14d4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		007aae539da743d749fb4f87f2d97181814fae288b98ec09854b5aa190c5c61638155cce469b397e9c1e53093dee93408d2cd85332b366a27ca2e0423cffebcd9dc2382758cd4b708e9e5596d900b9fe73fe79b5006833265cd3aa4d87a7d9d30968c073d1cfb9d69505875e6c2dd85323f8bb39efa7888a208295d2a2a09b8c2e15a57f98192fad8b822da8824a9c967fb8989d62251b24b814ab977c104f77c7c9a423f877234142619de139869674818f223bc5f5207f963708e4e1812b216a94dc04ab9df67b4360ee6aec6258bceb6a3df9e157d9f828d93f28b8fd830aa2307d9edf5a1861d148610ce9db939ef89fe3f8e70788386ad9e65e45bdae40f8