ukr.bible

Issued by R3

About this certificate

This digital certificate with serial number 03:d7:bb:3c:58:67:bd:a3:9b:2e:dc:27:33:13:fb:ba:16:85 was issued on by Let's Encrypt.

With 26 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=ukr.bible

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:d7:bb:3c:58:67:bd:a3:9b:2e:dc:27:33:13:fb:ba:16:85
Serial Number (int): 334746445649377037257300237114076934313605
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 4a:2d:eb:7c:c5:9f:45:67:c5:3a:7c:87:d9:7c:ad:f2:cc:9f:37:60
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 53:ad:86:7d:cf:52:58:5e:f6:f0:0c:96:90:90:42:d1:f1:b9:1e:eb
Fingerprint (sha256): 35:c8:7a:79:32:2c:60:c2:75:40:77:b1:99:81:96:f9:e2:82:6f:23:20:ef:32:22:5a:a2:ed:e7:f4:d1:71:16

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate ukr.bible

26

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ukr.bible

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

100halfmarathonclub.com
aboutme.realbrilliancerealty.com
angioplastystent.com
arbitragefortunes.com
atyli.com
audiostories.org
aurangabaddental.in
bloodsugarfriendlysolutions.com
buyerrebateprogram.com
fortworthtexaswoman.com
h1bcanada.com
homeschoolblockchain.com
ideadesigns.com
kg5sll.org
madeinbeautyland.com
originalfrom.com
readersnote.com
secondstorystudioanddesign.com
sexstoriesliterotica.com
silvanuspublishing.com
stronginstall.com
tahirburujlimelumenurulhudainvestments.com
thepreparedpropertybuyer.com
ukr.bible
uscountry.com
wwwyourdictionary.com

Other certificates including the domain name ukr.bible

(limited to 100 certificates)
dumptruck.ca
enjoyrxsugar.com.healthyhomeuniversity.com.ukr.bible
sale.nano.bible
sale.nano.bible
sale.nano.bible
ukr.bible
lng.world
dumptruck.ca
5272653.ca
dumptruck.ca
ukr.bible
ukr.bible
5272653.ca
5272653.ca
1031.trade
ukr.bible
musicoldies.ca
dumptruck.ca
5272653.ca
musicoldies.ca
ukr.bible
pharmacy-xl.net.ukr.bible
ticketsdirect.ca
musicoldies.ca
wiwak.vc
ukr.bible
musicoldies.ca
dumptruck.ca
musicoldies.ca
ukr.bible
ukr.bible
advertise.world
indestructible.bible
ukr.bible
musicoldies.ca
pharma-apotheke.info.ukr.bible
musicoldies.ca
5272653.ca
hudson.bible
dumptruck.ca
ukr.bible
musicoldies.ca
ukr.bible
sale.nano.bible
mygrinder.ca
dumptruck.ca
musicoldies.ca

Certificate

The complete raw certificate details for ukr.bible in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz4wp6be7IoyHuzneKb55
uOv8AhAb5M+I21xYP5AlKijYtcn22WrRojZHgk58VugYbZidLaOIzYvKaJ9OPw/x
h7/yHtZDknks338/KX37Xiw9AK0rju2/uhVBO/O+zq2NGtwxg8JSHr9FCJb4FC5h
R2Ne6Vy8Sg/yl/E1G1l6Btc4KEYotsXJJDFVALQi/8qlvvjexGGuh+BF4qyIGPyZ
nrktt1zbdeenPQFcYFaZy2mukleG6wJ5Aa7RWDLLUpU5G2RfFhr8/Tnq4dB3fker
3bwkUr+Onps0B8wRq4xqOGjG92NYXT+P566q8gYV+dgKlTwJSPZgUJaGbB9lqzaA
rwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 334746445649377037257300237114076934313605
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-26 22:45:36 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-25 22:45:35 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ukr.bible'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26200446435575759428668647795931568667616019619283468797936654481862403160434084276332191215826466354528025317596608668963557959444431002649227821557780716187073048904620111616589497182737021198039548142565156425746817702778195546630420718422909043415547467420096486793873441092254220178552594339285873811384640220421825023001102228630676973401875404651668091356059418291164131178955151452343827830958840192854125659230591443964711170649086729939542174217218787438932605306133567140430811680427079426041429243458699353015411607639602291399347669019315321404964392682738228757805777007589081027969324991518066028740783
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4a2deb7cc59f4567c53a7c87d97cadf2cc9f3760
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (591 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '100halfmarathonclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aboutme.realbrilliancerealty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'angioplastystent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arbitragefortunes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atyli.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'audiostories.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aurangabaddental.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bloodsugarfriendlysolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buyerrebateprogram.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fortworthtexaswoman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'h1bcanada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homeschoolblockchain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ideadesigns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kg5sll.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'madeinbeautyland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'originalfrom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'readersnote.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secondstorystudioanddesign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sexstoriesliterotica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'silvanuspublishing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stronginstall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tahirburujlimelumenurulhudainvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thepreparedpropertybuyer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ukr.bible'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uscountry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwyourdictionary.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018f1cccd2c50000040300473045022100c1965a309a0387fbadbd039bdc4d2514349a8ee3498f929d58f965b8000a2e8b022071bc1e637798d9e19e03ce18cc68d749e8539fdd2572ddebea2b6be9dc96ecb300760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018f1cccd3130000040300473045022074536361faec8332c2a3c4f21f2f142bbc38b5776b0505b147a9f0604d4a2ba10221009515de2d1c3489c1718db8c17622c995016ad1813188d2db2392346caae1e906
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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