homeschoolprayers.org

Issued by R3

About this certificate

This digital certificate with serial number 04:0f:52:e3:f5:b9:2d:de:37:80:49:69:64:9d:9c:8a:13:eb was issued on by Let's Encrypt.

With 17 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=homeschoolprayers.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:0f:52:e3:f5:b9:2d:de:37:80:49:69:64:9d:9c:8a:13:eb
Serial Number (int): 353663559561758072474764706689999220380651
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: f1:f4:8c:88:70:2f:6f:2b:12:07:81:e7:85:49:d3:9f:ba:10:ad:50
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 80:84:78:e1:1b:b4:8a:46:3c:b4:ec:0a:05:38:b6:af:ac:6e:f0:bc
Fingerprint (sha256): 52:4b:45:f0:fb:c6:3c:36:7f:fd:5c:0e:a0:fd:f7:5b:7e:5d:39:bb:80:94:0b:a7:70:a5:b0:76:27:35:ba:97

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate homeschoolprayers.org

17

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for homeschoolprayers.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

alluloseisacaloricrestrictionmimetic.com
corpuschristicommercialappraiser.com
discoverbengal.in
estetistar.com
geek4vip.com
growyourway.net
homeschoolprayers.org
metrofrom.com
nelvita.com
privatejet4vip.com
rathdrumrealestate.com
reviewsbyrich.com
rocketclutch.net
rosebudcounty.com
scm2.skyspirit.com
socorrocounty.com
withoutpills.com

Other certificates including the domain name homeschoolprayers.org

(limited to 100 certificates)
homeschoolprayers.org
homeschoolprayers.org
homeschoolprayers.org
homeschoolprayers.org
homeschoolprayers.org
ufx.co.za
sa-rugby.co.za
skinrash.org
polkachange.com.homeschoolprayers.org
lbssonline.org
homeschoolprayers.org
homeschoolprayers.org
athenadayspa.com.voetbal.co.za
homeschoolprayers.org
shaadic.com.ticketsdirect.ca
thebaotrace.org.homeschoolprayers.org

Certificate

The complete raw certificate details for homeschoolprayers.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Xm/wahBWnthgXrn6Pqr
1diQFPN9zgh+C5jQTatOEzVrIyTWzAXFzCpC1tSnIlOrGbpxgWuO3jDx6pKPg213
X6P4LsOvpyqTp5Zy6nwPTiAeUrY5wvzhiZrlRcSCZD2Ws7ydbXL/VWzFYW6Tyy2D
HMvrEs4OKZIVuollmCEEphEEmm7rKCAXzVakKM91GE79s6LKNt5cg3m1DFBjLyT8
42dznnam63Nj0cTModrRl90wIEbR4BIGKWsFAZT75xPEV7pLSAoi9/wOJgtSUpcA
m2boduN7tyHlefPrrzRvjcjydqLF+EPnBfdaAJEmK1mXYxBwFphmlvGb4+qh2adl
NQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 353663559561758072474764706689999220380651
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-26 10:48:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-25 10:48:53 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'homeschoolprayers.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26443842431430802426917965081847212187561977397203131316273313850306854213284415900113754804974607389618393608284248843217171827156577726875470001651441535201186912136274528862659926669406065634672620865004492177529652543482812950558761245974298182216717028668042877809397038784606192738561445438247623668157158638266181307141913065153273678171253038317975516824347091472722872071632449415982696947590604731247301283037946948183376253569921389221186678521252834821306728285921769726078316044877561056540208277698251219448201396907859586446806011854630911456336650104476428120728714148013152181034715362206737955775797
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f1f48c88702f6f2b120781e78549d39fba10ad50
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (358 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alluloseisacaloricrestrictionmimetic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corpuschristicommercialappraiser.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'discoverbengal.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'estetistar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geek4vip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'growyourway.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homeschoolprayers.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metrofrom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nelvita.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'privatejet4vip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rathdrumrealestate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reviewsbyrich.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rocketclutch.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rosebudcounty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scm2.skyspirit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'socorrocounty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'withoutpills.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d4599f82d000004030046304402206c1ceabead7a147720dafb2d08a7272fa1a125ae1371cfea06a3e4605e9a772d022008f710c2f74c6fc5daf0807f5c9cda11376ec1deb0127d4b3c234bd15c05f32d007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018d4599f89800000403004730450220547ecd8ebf879d13cb4925876e091f16cdbab207de40f965492d6dd4fc3c3ba5022100f686af3db794d26e8a4291d0724ac8a14ddc0a945ec6a6b9b5a2e2da4e77e98f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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