www.example316.bible

Issued by R3

About this certificate

This digital certificate with serial number 04:bd:87:36:47:36:51:b6:68:47:51:b7:28:40:7a:7a:52:b0 was issued on by Let's Encrypt.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.example316.bible

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:bd:87:36:47:36:51:b6:68:47:51:b7:28:40:7a:7a:52:b0
Serial Number (int): 412942238682914372142382647825028871770800
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 77:38:3f:6c:b9:a2:91:17:dc:d6:a6:9d:77:3e:b8:6b:43:b7:46:3b
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 52:be:a3:17:1c:48:9a:3d:eb:70:23:06:bd:59:38:9d:81:15:58:c5
Fingerprint (sha256): 22:84:c2:ee:55:b3:c0:81:eb:b1:ba:14:fd:ed:8e:21:f0:9a:2c:ae:c8:5f:65:ec:d2:80:7c:0b:65:ff:fe:ab

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.example316.bible

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.example316.bible

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ferguscounty.com
kitesurfpuntacana.com
olivoforillinois.com
retiredbabyboomers.com
tylerstipe.net
www.example316.bible

Other certificates including the domain name example316.bible

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.example316.bible in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmAc1NjNmm01ttGYqkbeL
viBY8xPDz8M6ST4Xutm1znHJBrlQkymflLS3NlAGS3f/LrEq9ubkZZQDJ3uMFX7t
2PSffsqomeaRbrxkEmWLo0feIQaKARamooDJ4Iwe76Re2BZa3X1LPL9N2zwfY5u+
zYw5wk4NNOm2t6Toek8Jj7YdsQ+7QJ5teR1J5YrZgReb9JLViGNCWi25Rojy+Oc/
tDidYnJTIyi6yJantP5nKjKluI9VAxy/WA8lThvvz+/2az8ey0rcOymbZNuQ1zBq
2T13pqZTAfYpYQRdSAi3hCO9hGrTpgir3bUuBeyeFJ2aNmYHQsPYesfi3aHKg6vC
qQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 412942238682914372142382647825028871770800
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-26 19:02:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-25 19:02:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.example316.bible'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19191776682234485281773682393827141914164139177167783689631735637404764572362660215966852076431080010887954805176898820293153499873786477287907917488537947774800555242887697415808292470682230596776815081048440992984851496412100050304486568311216788399841438398473181668348144089475604274091745033382377518116521585110897343542080812452589964156712308167915556281870073195591926357267466547775153239945661125371506747443406806202724685430180588468864224969210758264543029888296210466147258376271056137901828996188910782123328314280128375438697260968768565757132923200140975787159627935778725060004332674871899246543529
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							77383f6cb9a29117dcd6a69d773eb86b43b7463b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (127 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ferguscounty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kitesurfpuntacana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olivoforillinois.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retiredbabyboomers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tylerstipe.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.example316.bible'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018f1c0051ae0000040300483046022100bae7322fe64076ebe136dd2753099da7068a5a28213338662bc8caf206cf28f00221009081422454b6106882daa88c21cc531bfdca99610925c5e66617fd964a7316bd0076001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca0000018f1c0051b9000004030047304502203483a18f5347f3879f117dc6e947017d4efa57910753ecfeaec2fbe7ae70d166022100cd18be49362e83812f2e9b30bb6a0db9884e10d28e573b1bb48d6dabd3f70833
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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