sangabrielmissionchurch.org

Issued by E1

About this certificate

This digital certificate with serial number 03:13:d9:48:15:3e:86:f3:64:d3:47:0f:fb:91:42:29:df:16 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=sangabrielmissionchurch.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:13:d9:48:15:3e:86:f3:64:d3:47:0f:fb:91:42:29:df:16
Serial Number (int): 268091039518122224986678922678828576399126
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d4:af:76:87:da:c6:af:3c:5b:f2:08:ce:9c:d1:e5:f6:6f:b1:a8:53
AuthorityKeyId: 5a:f3:ed:2b:fc:36:c2:37:79:b9:52:30:ea:54:6f:cf:55:cb:2e:ac

Fingerprint (sha1): 41:5c:b6:ae:03:da:d4:bc:e5:b2:b7:3e:49:4b:7e:cf:ce:e4:d0:a4
Fingerprint (sha256): 32:fd:9f:61:e5:80:ca:f4:c8:dd:13:c9:b0:6d:1a:c0:7d:11:d0:28:b1:0a:6b:21:e8:de:b7:49:9e:ba:e1:d1

Issuing Certificate URL: http://e1.i.lencr.org/

Revocation information

OCSP Server: http://e1.o.lencr.org

Check the revocation status for certificate sangabrielmissionchurch.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sangabrielmissionchurch.org

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

ECDSA with SHA384

Key Usage

Digital Signature

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sangabrielmissionchurch.org

Other certificates including the domain name sangabrielmissionchurch.org

(limited to 100 certificates)
admin.benchmarkbobcats.org
parish.sangabrielmissionchurch.org
admin.williamwood.visd.net
jsms.rsu14.org
admin.angelocatholicschool.com
www.hisdbrahmas.org
admin.bme.manorisd.net
www.christrpv.com
admin.angelocatholicschool.com
www.rfm.rcschools.net
www.gorman.esc14.net
sangabrielmissionchurch.org
daycare.eastlandisd.net
sangabrielmissionchurch.org
admin.angelocatholicschool.com
admin.angelocatholicschool.com
www.sangabrielmissionchurch.org
admin.exteraschools.org
admin.angelocatholicschool.com
sangabrielmissionchurch.org
sangabrielmissionchurch.org
admin.benchmarkbobcats.org
rcmsmatadors.org
admin.angelocatholicschool.com
parish.sangabrielmissionchurch.org
baxterjh.eisd.org
admin.angelocatholicschool.com
admin.angelocatholicschool.com
ees.elkincityschools.org
parish.sangabrielmissionchurch.org
admin.angelocatholicschool.com
ems.elkincityschools.org
web.euroamericanosur.edu.mx
admin.keppel.pusdschools.net
sangabrielmissionchurch.org
admin.bme.manorisd.net
ces.lowndes.k12.ms.us
chs.lowndes.k12.ms.us
admin.angelocatholicschool.com
admin.bme.manorisd.net
admin.angelocatholicschool.com
ctc.lowndes.k12.ms.us
admin.angelocatholicschool.com
admin.llhs.org
admin.benchmarkbobcats.org
wcms.mpusd.net
bp.smithvilleisd.org
www.sacredheartacademyhempstead.org
admin.angelocatholicschool.com
admin.benchmarkbobcats.org
parish.sangabrielmissionchurch.org
admin.ehs.elkincityschools.org
sangabrielmissionchurch.org
admin.angelocatholicschool.com
admin.ece.pusdschools.net
www.newlamiddle.org

Certificate

The complete raw certificate details for sangabrielmissionchurch.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIDljCCAxygAwIBAgISAxPZSBU+hvNk00cP+5FCKd8WMAoGCCqGSM49BAMDMDIx
CzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQDEwJF
MTAeFw0yNDAyMTIxOTUyMTRaFw0yNDA1MTIxOTUyMTNaMCYxJDAiBgNVBAMTG3Nh
bmdhYnJpZWxtaXNzaW9uY2h1cmNoLm9yZzBZMBMGByqGSM49AgEGCCqGSM49AwEH
A0IABIcQmjCyYumw4vlEDMwg/Zd8zEZdQX17+RlNUfqyiQs3ResaVaciJfFDzlPU
xQ/tAkinlFM65RwD2FvfZAARuTOjggIcMIICGDAOBgNVHQ8BAf8EBAMCB4AwHQYD
VR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0O
BBYEFNSvdofaxq88W/IIzpzR5fZvsahTMB8GA1UdIwQYMBaAFFrz7Sv8NsI3eblS
MOpUb89Vyy6sMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0cDovL2Ux
Lm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vZTEuaS5sZW5jci5vcmcv
MCYGA1UdEQQfMB2CG3NhbmdhYnJpZWxtaXNzaW9uY2h1cmNoLm9yZzATBgNVHSAE
DDAKMAgGBmeBDAECATCCAQMGCisGAQQB1nkCBAIEgfQEgfEA7wB1AEiw42vapkc0
D+VqAvqdMOscUgHLVt0sgdm7v6s52IRzAAABjZ8Xg+UAAAQDAEYwRAIgD9GBGKjk
5+0/DvSiIRLO0k6FC74UlhEbcu9lxj3k6gsCIGsUrJqTcd319paRjYukvHT+Xclj
6ygMKm6JM7SDm6NfAHYAouK/1h7eLy8HoNZObTen3GVDsMa1LqLat4r4mm31F9gA
AAGNnxeD/gAABAMARzBFAiEAlCh5yzRWbJPy9CxYLm6cQYapyRgxE//h4VFucb23
8ToCIGLPNVRTm8MXrUeqf1y+wW6t/Cm9yOtaxO5Fnt9FXwArMAoGCCqGSM49BAMD
A2gAMGUCMEnkqrtnqfHIRk+Ejnrw9rXGnEAViLzfAF4+hSVa5lkaTx2UJ36Oj5e/
RxJE6WL/qgIxAI//zMCiaozgBdr21u9YfbywZuXiYG3ZZ66+fTYiWsLsrl4a8wEl
0OXiLV7RxoJr7g==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEhxCaMLJi6bDi+UQMzCD9l3zMRl1B
fXv5GU1R+rKJCzdF6xpVpyIl8UPOU9TFD+0CSKeUUzrlHAPYW99kABG5Mw==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 268091039518122224986678922678828576399126
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.4.3.3 (ecdsaWithSHA384)
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'E1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-12 19:52:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-12 19:52:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sangabrielmissionchurch.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				000487109a30b262e9b0e2f9440ccc20fd977ccc465d417d7bf9194d51fab2890b3745eb1a55a72225f143ce53d4c50fed0248a794533ae51c03d85bdf640011b933
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d4af7687dac6af3c5bf208ce9cd1e5f66fb1a853
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5af3ed2bfc36c23779b95230ea546fcf55cb2eac
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://e1.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://e1.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sangabrielmissionchurch.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d9f1783e5000004030046304402200fd18118a8e4e7ed3f0ef4a22112ced24e850bbe1496111b72ef65c63de4ea0b02206b14ac9a9371ddf5f696918d8ba4bc74fe5dc963eb280c2a6e8933b4839ba35f007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018d9f1783fe0000040300473045022100942879cb34566c93f2f42c582e6e9c4186a9c9183113ffe1e1516e71bdb7f13a022062cf3554539bc317ad47aa7f5cbec16eadfc29bdc8eb5ac4ee459edf455f002b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.4.3.3 (ecdsaWithSHA384)
 . . . . [c:0|t:3|false] BIT STRING (824 bits)
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 11373209034402881471532630530262848196579805763013214867262875909317289989176342950019003963890988412226188559450026
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22163508128484861110881145743412305334042494131137417700278176067665773985793328615234005792595428447042815033240558