www.the-way-to-the-cross-ministries.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:8d:70:61:d7:f8:96:5c:10:39:4a:d3:08:c4:6b:32:6c:60 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.the-way-to-the-cross-ministries.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:8d:70:61:d7:f8:96:5c:10:39:4a:d3:08:c4:6b:32:6c:60
Serial Number (int): 309466053099869434882162734983357719014496
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 03:c6:8b:59:2c:26:23:c9:e5:17:67:46:d3:17:03:22:99:94:01:9e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 1a:12:51:1d:cf:b6:84:b1:b1:b9:c0:e6:57:64:59:a7:5b:1e:71:34
Fingerprint (sha256): 4a:c0:0e:f5:f5:0f:f6:c9:be:f7:7c:12:ca:07:9a:bb:d5:e7:d3:de:98:59:be:bc:73:e4:d3:cf:e0:29:b1:9f

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.the-way-to-the-cross-ministries.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.the-way-to-the-cross-ministries.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.the-way-to-the-cross-ministries.org

Other certificates including the domain name the-way-to-the-cross-ministries.org

(limited to 100 certificates)
shop.the-way-to-the-cross-ministries.org
the-way-to-the-cross-ministries.org
the-way-to-the-cross-ministries.org
www.the-way-to-the-cross-ministries.org
shop.the-way-to-the-cross-ministries.org
www.the-way-to-the-cross-ministries.org
www.the-way-to-the-cross-ministries.org
shop.the-way-to-the-cross-ministries.org
www.the-way-to-the-cross-ministries.org
the-way-to-the-cross-ministries.org
the-way-to-the-cross-ministries.org
shop.the-way-to-the-cross-ministries.org
www.the-way-to-the-cross-ministries.org
the-way-to-the-cross-ministries.org
shop.the-way-to-the-cross-ministries.org
www.the-way-to-the-cross-ministries.org
www.the-way-to-the-cross-ministries.org
the-way-to-the-cross-ministries.org
shop.the-way-to-the-cross-ministries.org
the-way-to-the-cross-ministries.org
the-way-to-the-cross-ministries.org
www.the-way-to-the-cross-ministries.org

Certificate

The complete raw certificate details for www.the-way-to-the-cross-ministries.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbyrxWlyGecl2BGi01a/
0lvry041V1wAqen3KNs1IZnTZN4vRU7PKrkxNKsm0v5E8FKdB2q8W7tO3bo5Xd3y
rCtmUN88tlDhkkzp9jMAQQ88gmTm8vbNe+ozJvntPqYm0U9/xUjTtdBtkwHc3sVq
3MnDhHIkI6LeMPmafVM2onuH9mQ81mBK46ZJfVP9/m6g8Mh9NWzYNYK4HimG3rSi
CAZ9Shg1SL26ioNwpYRC7kCIIo6S7/odu2F6wr7tEprmEAlyL0ebr+aTu02HEBCo
5Oj3hk2hz/es8znw59ONmmqFMTPb9uXkrOoYsLzAsqbDsdAjpBt/znJmNMScmlvq
4wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 309466053099869434882162734983357719014496
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-08 13:34:59 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-07 13:34:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.the-way-to-the-cross-ministries.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22437217107272869466988462462793553389229781232499761685405976971475238509438174907525771787076293584306281354244812816010698640116716849551662934151632194498309877883370167661838217430687682202920825717156619909844386379797606713428077888071819255038884205557937960002224626775285463271740819277820447578725163626706820059605999371910393428772804328259229025069643660868905141078842774139846348004522522814576566193946945796428958741848187267754984240853310761583694415455696493415178099349375010955959973586314569482395891761379007896953473628127517392081031702629021055380713226224858523165788842954675802336914147
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							03c68b592c2623c9e5176746d31703229994019e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (43 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.the-way-to-the-cross-ministries.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016ee5ef5b480000040300473045022100f98c9913c910e8e7289e52ce4c2e0c0b21a0a5ede896f2984b04a36a1baba5f502203a47e98901bdc42207ea36bb7c65112318241cd4c9db66e77c632d8da0d8809200760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016ee5ef5b7700000403004730450220338e2ec7af4e80e8b4508b0383809bed87f93e4e1e0f6044d974b90b4ffece5b022100bfdd0ee62699c6fdebb6d27cac71925cbcb057d3066239aa1e4f6094151b6f86
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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