www.safesouls.org

Issued by R3

About this certificate

This digital certificate with serial number 04:75:a5:77:65:22:1b:38:37:7b:72:97:25:00:5a:e5:cc:82 was issued on by Let's Encrypt.

With 30 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.safesouls.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:75:a5:77:65:22:1b:38:37:7b:72:97:25:00:5a:e5:cc:82
Serial Number (int): 388482123210647015126649488594621214084226
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 1e:26:af:ac:82:2c:7d:bb:70:b2:2c:b2:67:52:c4:2a:fa:32:5e:45
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): ab:cb:c7:aa:eb:55:60:ec:54:09:17:54:b0:23:23:fd:79:20:eb:38
Fingerprint (sha256): 29:39:b1:fa:4f:6f:0e:bb:e5:c3:96:08:f5:18:8c:9d:b9:6d:73:75:4e:92:df:5b:9d:6d:b4:4c:1a:90:d8:1b

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.safesouls.org

30

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.safesouls.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

3roosa.com
apotheqa.church
blaze.live
coverdale.bible
datamarketingllc.com
freedomgroupsunited.com
hormonefree.com
legalized.ca
ngunirail.co.za
parklandspa.com
pornodoma.com
safesouls.org
theyhaveastory.org
www.3roosa.com
www.apotheqa.church
www.blaze.live
www.coverdale.bible
www.datamarketingllc.com
www.freedomgroupsunited.com
www.hormonefree.com
www.legalized.ca
www.ngunirail.co.za
www.parklandspa.com
www.pornodoma.com
www.safesouls.org
www.theyhaveastory.org
www.xn--4dbhdled1ce.com
www.xn--7dbdlt0c.com
xn--4dbhdled1ce.com
xn--7dbdlt0c.com

Other certificates including the domain name safesouls.org

(limited to 100 certificates)
www.safesouls.org
www.treatmentsleepapnea.com
www.poslovniprogram.com

Certificate

The complete raw certificate details for www.safesouls.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMJHKzQXoa1zfW68V0f0
ZpECtZBQzgnqaljICX9e0yFd6r8iFhpmjh1lmQw5vtbDp+BHVlcwJopWl22Qf82p
BJj4izr2hqpJ4DhG0Zo0M8gGNHUdAni6Vln1eIMpAUW+Rv16DUmK9XnSB4nbbskq
+6gFNqUCYLQmdLRnQbUo/vpKQCUVVMlg1p2xoDdIm2eVTaI3Y92FQeTx4pOLd0iN
PZwfClc6b2NqoZ01u3eCBO29RarHnIuJzO/j1vcOhPzMMx2ayxQp5e3XprUTWSdt
xZIoWif/Llix+o4yC4VCrzwwpN2QwJyZIg/2wTnmTytjK4szHN4Nk34GXtFL4rNz
PQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 388482123210647015126649488594621214084226
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-13 04:10:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-11 04:10:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.safesouls.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23828603387481321043514721378761983763693046418111651129018219315965515588721028728335148094462777276904323954981079409149806645906919156233271688148484340424668449861298170427468552134099895321216696044512500816754031167126694961034090139047696666957758027858118492425382243362944188363948409593419478927116294160223715724387289448300959909872187604907390709768508351109958100043315029756173052557663849827386188689728242215338523398502636294706066637948017545791871054731885928268161849863451153925723364951520316447128017014007600150753024174247590796084887373227334828138492793384147299265230763679115421011899197
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1e26afac822c7dbb70b22cb26752c42afa325e45
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (582 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '3roosa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apotheqa.church'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blaze.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coverdale.bible'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'datamarketingllc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freedomgroupsunited.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hormonefree.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legalized.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ngunirail.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parklandspa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pornodoma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'safesouls.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theyhaveastory.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.3roosa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.apotheqa.church'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blaze.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coverdale.bible'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.datamarketingllc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.freedomgroupsunited.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hormonefree.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.legalized.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ngunirail.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.parklandspa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pornodoma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.safesouls.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theyhaveastory.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--4dbhdled1ce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--7dbdlt0c.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--4dbhdled1ce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--7dbdlt0c.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb499000001894da826fa0000040300473045022077ab17df34ca52179652cb0bee8f290e490608a43ba3a596d5ed8d515a3e910e0221008471073b2cd0c64bf2f37439b552be5315f8f5de8327e1dbec029c6e737d234c0075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb52000001894da827120000040300463044022032eef72810390af825db0db60876392257ca9df91be7127c59877f6042572497022035585fc4472e1783086fccabeb8898bf3d833362bf3c22dc8946a17474e49053
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00512827ec90d0a8e1f83870c48d78e55eb3566b4565d200c350e93799e27b2347e3ab7d3fc3dfb71f7bb1914fa04420581d5c966c1971dd33a54798340e2d5be06547e82e86d677bfb43281ecd55ec4530cb1a6e986bb05c24f7d6b21efe3af11557928927a9a5e6013204f040d592780eddd6e46b3e1dbe7442245ea0f87439bb64fad74f05cc3043721de0bf88ad768e68484d8ff75fbd8051abe340ea91735f6a18fe853a5d554ef0b9973c1d0336e81cc39235e5b2a0c69200d669e2d84806ef462d833667dd8b7d44cdbec2c65396dafc52116c9a989a23688f2acc5c426ab3433ac7f295b684e4c0add711726b3b3db74607ba60d1b8cd31101e10ebe08