healingheartsclub.bible.homeschoolcpl.org
Issued by R3
About this certificate
This digital certificate with serial number 04:79:44:69:6d:0a:f4:d0:d2:13:7b:4c:3e:bb:22:67:d6:0e was issued on by Let's Encrypt.
With 11 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=healingheartsclub.bible.homeschoolcpl.org
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:79:44:69:6d:0a:f4:d0:d2:13:7b:4c:3e:bb:22:67:d6:0eSerial Number (int): 389714245031008756316020321802575577339406
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 1c:c5:3e:de:38:e4:10:4e:76:0b:3d:5a:5a:ef:0c:e3:bd:d4:cc:69
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 07:98:fa:fa:44:3a:4a:ad:95:ae:a3:39:df:99:96:0f:76:6e:56:89
Fingerprint (sha256): 47:7b:03:9b:b4:56:75:b3:6f:93:df:0e:60:6f:84:f9:fb:79:c5:82:43:ff:89:87:45:71:f6:47:c1:31:95:da
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate healingheartsclub.bible.homeschoolcpl.org
11
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for healingheartsclub.bible.homeschoolcpl.org
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
beyergroup.com
civilvote.com.projectforvip.com
daily.singles.followtherevolution.com
fivesolasalliance.org.firstbankng.com
healingheartsclub.bible.homeschoolcpl.org
jenbenzer.com
nonfungibleidentity.org
redrosesbouquet.com
releasethedocument.com
rubberprides.com
sensorstv.com
civilvote.com.projectforvip.com
daily.singles.followtherevolution.com
fivesolasalliance.org.firstbankng.com
healingheartsclub.bible.homeschoolcpl.org
jenbenzer.com
nonfungibleidentity.org
redrosesbouquet.com
releasethedocument.com
rubberprides.com
sensorstv.com
Other certificates including the domain name homeschoolcpl.org
(limited to 100 certificates)
getabetterjob.ca
theqtree.org
homeschoolcpl.org
healingheartsclub.bible.homeschoolcpl.org
parcel.tube
blackpanther.fund
anselmacademic.bible
smokeymountainbible.org
homeschoolcpl.org
homeschoolcpl.org
b-u.in.homeschoolcpl.org
rogue-gaming.net.homeschoolcpl.org
vacations.vc
stayclosetothefire.com.homeschoolcpl.org
borcim.com.homeschoolcpl.org
homeschoolcpl.org
theqtree.org
homeschoolcpl.org
healingheartsclub.bible.homeschoolcpl.org
parcel.tube
blackpanther.fund
anselmacademic.bible
smokeymountainbible.org
homeschoolcpl.org
homeschoolcpl.org
b-u.in.homeschoolcpl.org
rogue-gaming.net.homeschoolcpl.org
vacations.vc
stayclosetothefire.com.homeschoolcpl.org
borcim.com.homeschoolcpl.org
homeschoolcpl.org
Certificate
The complete raw certificate details for healingheartsclub.bible.homeschoolcpl.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGGjCCBQKgAwIBAgISBHlEaW0K9NDSE3tMPrsiZ9YOMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzA5MTgwNzIyMDNaFw0yMzEyMTcwNzIyMDJaMDQxMjAwBgNVBAMT KWhlYWxpbmdoZWFydHNjbHViLmJpYmxlLmhvbWVzY2hvb2xjcGwub3JnMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwE00LFN7a2tRQQT8cygpTnok/cmv /ijWVeeb4Rt7pFr9fX4ws8/uVz5ngAIIb0ZOyA5RTcM086JwtsdN+mrdSwngEOD9 9jVQO5ypBKZX3aWrMiLUW9PspZINpSkgAkmP+0HwUOxFEtHrd5XKJEZXHyqN2bBT rvHLD6jpmePxhSCr80epRBHUsyrdyvHd5o8RQiMh9c7QZLNQtkJSwoQgmpISAnLs vDpoECawiU1532zf6yQ81Od5d/Irf0nFJLFiAr5y4JXLdIXW/MwPjYhmKfYJuIX/ BEngGS54JwmD1erLj/0IabWY4JPaf0NZ5HinZV6u2yKhDOEClcWVEykEOwIDAQAB o4IDJjCCAyIwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggr BgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBQcxT7eOOQQTnYLPVpa7wzj vdTMaTAfBgNVHSMEGDAWgBQULrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcB AQRJMEcwIQYIKwYBBQUHMAGGFWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEF BQcwAoYWaHR0cDovL3IzLmkubGVuY3Iub3JnLzCCAS0GA1UdEQSCASQwggEggg5i ZXllcmdyb3VwLmNvbYIfY2l2aWx2b3RlLmNvbS5wcm9qZWN0Zm9ydmlwLmNvbYIl ZGFpbHkuc2luZ2xlcy5mb2xsb3d0aGVyZXZvbHV0aW9uLmNvbYIlZml2ZXNvbGFz YWxsaWFuY2Uub3JnLmZpcnN0YmFua25nLmNvbYIpaGVhbGluZ2hlYXJ0c2NsdWIu YmlibGUuaG9tZXNjaG9vbGNwbC5vcmeCDWplbmJlbnplci5jb22CF25vbmZ1bmdp YmxlaWRlbnRpdHkub3JnghNyZWRyb3Nlc2JvdXF1ZXQuY29tghZyZWxlYXNldGhl ZG9jdW1lbnQuY29tghBydWJiZXJwcmlkZXMuY29tgg1zZW5zb3JzdHYuY29tMBMG A1UdIAQMMAowCAYGZ4EMAQIBMIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDwAHcAejKM VNi3LbYg6jjgUh7phBZwMhOFTTvSK8E6V6NS61IAAAGKp2He7AAABAMASDBGAiEA znJk8SS53BE7Zd8lMIKoXb032uG/XNDsAEvxur1bOskCIQDHAprjay/llHKk6iv3 GkEUntcE76u8xPVD60sIGD+n3AB1AOg+0No+9QY1MudXKLyJa8kD08vREWvs62nh d31tBr1uAAABiqdh3uoAAAQDAEYwRAIgL4BAHf2K8aEzxqo0RsXzhvUBxnOLcDDm Ou1V7fs1oxMCIHxG3bAkZZwUr+wrlTe80LheUCb7YKVyN7lBxhfTDBVrMA0GCSqG SIb3DQEBCwUAA4IBAQBtWOqMish0P0gJs3YG/FDi35BgwikSkrpU3ck1dq1RxvoO A63PimhdsRmdioE8ThbZgZnQvE/ccwq5odDBQTlwVCHuB5NwL1JW8S2/1Vu7+hXl T/kFfiDkVtE7YoxrpFbcgd5peahxNxcmmwSATL47NWCzkl+8UUWwZWE1gP+MsvQC d6iNPyMokhf0mHzvaVb7zWYlRjeunoqofIcZf/wrj+2Mwd7GWjDlfRlsGgpUZLmO NOzKfhh6XYH3q/F7Bm9rYIeMBeFzTlDZrv+Bs198cj+c30+09FCn0q+lXSXN4+Yr 5QmyajMpV1Y7ezeybOqmZt7pKwYeWJsMdi6s5jib -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwE00LFN7a2tRQQT8cygp Tnok/cmv/ijWVeeb4Rt7pFr9fX4ws8/uVz5ngAIIb0ZOyA5RTcM086JwtsdN+mrd SwngEOD99jVQO5ypBKZX3aWrMiLUW9PspZINpSkgAkmP+0HwUOxFEtHrd5XKJEZX HyqN2bBTrvHLD6jpmePxhSCr80epRBHUsyrdyvHd5o8RQiMh9c7QZLNQtkJSwoQg mpISAnLsvDpoECawiU1532zf6yQ81Od5d/Irf0nFJLFiAr5y4JXLdIXW/MwPjYhm KfYJuIX/BEngGS54JwmD1erLj/0IabWY4JPaf0NZ5HinZV6u2yKhDOEClcWVEykE OwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 389714245031008756316020321802575577339406 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-18 07:22:03 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-17 07:22:02 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'healingheartsclub.bible.homeschoolcpl.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24275825166846364761849380404246290438141275650814765126189566254013303292869573011821756699285516315059078648140872835819948375145452341288716407741446725204344982463397762194681273056692337287929474302387351259565019909568612026074058359790020305260595790389117071190834637997878473030215103215526883641975410454546972712289642702364292509848819887082083982336018014444967169544281187949899453739911036583233347311676359079087527420772158907241580275159165265644616441369926460504999083064347620017327065619966902808247026777457289392468463306554359043879725812912935729859939649472212218112879560946744238837138491 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 1cc53ede38e4104e760b3d5a5aef0ce3bdd4cc69 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (292 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beyergroup.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'civilvote.com.projectforvip.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'daily.singles.followtherevolution.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fivesolasalliance.org.firstbankng.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healingheartsclub.bible.homeschoolcpl.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jenbenzer.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nonfungibleidentity.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redrosesbouquet.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'releasethedocument.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rubberprides.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sensorstv.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f00077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018aa761deec0000040300483046022100ce7264f124b9dc113b65df253082a85dbd37dae1bf5cd0ec004bf1babd5b3ac9022100c7029ae36b2fe59472a4ea2bf71a41149ed704efabbcc4f543eb4b08183fa7dc007500e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018aa761deea000004030046304402202f80401dfd8af1a133c6aa3446c5f386f501c6738b7030e63aed55edfb35a31302207c46ddb024659c14afec2b9537bcd0b85e5026fb60a57237b941c617d30c156b . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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