www.bibleresearchinstitute.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:31:be:de:71:ee:4e:d2:65:b8:31:38:d0:42:dc:e1:7a:1b was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.bibleresearchinstitute.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:31:be:de:71:ee:4e:d2:65:b8:31:38:d0:42:dc:e1:7a:1bSerial Number (int): 278264402094301435473740928117271928338971
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: a4:83:63:bd:95:c9:98:22:a3:55:b8:96:16:a1:e9:70:19:7c:6f:c7
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): bc:c2:ac:b9:6f:53:c3:c5:44:ad:b6:b0:e7:55:e5:ef:92:bb:d3:df
Fingerprint (sha256): 5a:af:fb:93:c0:6e:ce:f2:e2:dd:93:9f:e7:85:e8:7f:75:65:68:26:7d:ed:45:85:ae:ad:97:e5:31:92:41:25
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate www.bibleresearchinstitute.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.bibleresearchinstitute.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.bibleresearchinstitute.com
Other certificates including the domain name bibleresearchinstitute.com
(limited to 100 certificates)
www.includeme.com
www.bibleresearchinstitute.com
www.bibleresearchinstitute.com
bibleresearchinstitute.com
www.bibleresearchinstitute.com
bibleresearchinstitute.com
www.bibleresearchinstitute.com
bibleresearchinstitute.com
bibleresearchinstitute.com
bibleresearchinstitute.com
bibleresearchinstitute.com
www.bibleresearchinstitute.com
www.bibleresearchinstitute.com
bibleresearchinstitute.com
www.bibleresearchinstitute.com
bibleresearchinstitute.com
www.bibleresearchinstitute.com
bibleresearchinstitute.com
bibleresearchinstitute.com
bibleresearchinstitute.com
bibleresearchinstitute.com
Certificate
The complete raw certificate details for www.bibleresearchinstitute.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGdjCCBV6gAwIBAgISAzG+3nHuTtJluDE40ELc4XobMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA3MjYxMDAzNTZaFw0x OTEwMjQxMDAzNTZaMCkxJzAlBgNVBAMTHnd3dy5iaWJsZXJlc2VhcmNoaW5zdGl0 dXRlLmNvbTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBALUcWJTsL+1F ZrkLvA5BrAXq87TmedvdyDF3ewCyJsEME2THHg8YS6iFpJuwDoQ8Y3XLxtMcVv7U JduNdeJSZF1xidy9vmKUppjco6ZAX0K/xNle+0FfsJ2S8ck2g4EvtIeG2We3tvGh iTJOYhINqBtrJn8PlqT8YfxsSXYoYJ5rVew6wPIIa64tABbfuuvgpPUKEmMIx8ad /phRSkbCXhvppFC0rVHZNvf5MwYrjqfl0lwjEYNxp0Yj1EzinX4NNsI0MCMhAuQp d76wYIwzUnAmSKrdk8HvS7C61unm5HeA9eh1NX3J78LThrq1t7BkIQHGUGoEcfOr 4ALqGa4jHWpdhUKkaizwJQtVPgAW/v7TdRs96Ll+eEfzFHHLPOWUnH7XezQVjgzb WWhYBaGCdeQHSllo+PJ58XoOTZoqf/7qP+nwrXHA0/sGOEqbq3KIeYk2doJKoLje 3cvSxfbuZU5ticbWKPm8kQPPFnsiEPLi3hsM3SF9b/+ETdYGaTm0j3W15wUsY4PR xcaT1T+VAoHwmqUskJpfCxGfbAhWKxhHNA7PTqF/438nxr4n2gTfsEZwtUjcWitG 60FjqvHzPYV58/vAO7iCvBVBj1Zm9CjHMcE2+zX8StnSBqvfehI6BvzSb8cg7MHB JbAItKm4iAHp0ObawH9yKnO9fHZfPM6PAgMBAAGjggJ1MIICcTAOBgNVHQ8BAf8E BAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQC MAAwHQYDVR0OBBYEFKSDY72VyZgio1W4lhah6XAZfG/HMB8GA1UdIwQYMBaAFKhK amMEfd265tE5t6ZFZe/zqOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYi aHR0cDovL29jc3AuaW50LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYj aHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNyeXB0Lm9yZy8wKQYDVR0RBCIwIIIe d3d3LmJpYmxlcmVzZWFyY2hpbnN0aXR1dGUuY29tMEwGA1UdIARFMEMwCAYGZ4EM AQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0 c2VuY3J5cHQub3JnMIIBBgYKKwYBBAHWeQIEAgSB9wSB9ADyAHcAdH7agzGtMxCR IZzOJU9CcMK//V5CIAjGNzV55hB7zFYAAAFsLfOeDwAABAMASDBGAiEA6U/oz/DD xjl2dsxz7+OSWz15yRSco6ibm11gdas05vACIQC0dvXsV84OWLWm1Pk9LvqHJcdb vlzmTBKpOqK54gsdtwB3AGPy283oO8wszwtyhCdXazOkjWF3j711pjixx2hUS9iN AAABbC3znisAAAQDAEgwRgIhANSF7aJWVfUbFcXNUVnCt15gzz95DRdlvP8bSyqR Xa2+AiEA4fuFusDgDOruZvxJ1vHon58gL8HCdz7MIr3JDyYnogAwDQYJKoZIhvcN AQELBQADggEBAHSEilvxP+Zd1ABGkJYH7OCkEc6gquCbZ6DsAYq29qaJMBlRJ3OM YiTXe2f1yqn8oNU87wjRqaGgN1TX5jO4EsA/BqnCEYGUeZ7iOvRRWBRj4ijfuM1R BuleVOkELXMFc4QiQslBqopsjxr1Rd2sx32fUSdVTIL0S0tG+9V8/CCQmc/IM9Wy 1NMU1bGVURXXDvpQfNeRBScU/XHJu1jU7vep9Woukq26SBhyzER2QoOBZR5JmDJo vo0x8j9BF0v9VUDdN9jZNC4lIJBK3ExYFSqJW5LiGYzeNbSMED0J0rMIOzTfAqQO uTo+Vi57Zqi63r8dXxV3f7g4BN+fFBdZVOw= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAtRxYlOwv7UVmuQu8DkGs BerztOZ5293IMXd7ALImwQwTZMceDxhLqIWkm7AOhDxjdcvG0xxW/tQl24114lJk XXGJ3L2+YpSmmNyjpkBfQr/E2V77QV+wnZLxyTaDgS+0h4bZZ7e28aGJMk5iEg2o G2smfw+WpPxh/GxJdihgnmtV7DrA8ghrri0AFt+66+Ck9QoSYwjHxp3+mFFKRsJe G+mkULStUdk29/kzBiuOp+XSXCMRg3GnRiPUTOKdfg02wjQwIyEC5Cl3vrBgjDNS cCZIqt2Twe9LsLrW6ebkd4D16HU1fcnvwtOGurW3sGQhAcZQagRx86vgAuoZriMd al2FQqRqLPAlC1U+ABb+/tN1Gz3ouX54R/MUccs85ZScftd7NBWODNtZaFgFoYJ1 5AdKWWj48nnxeg5Nmip//uo/6fCtccDT+wY4Spurcoh5iTZ2gkqguN7dy9LF9u5l Tm2JxtYo+byRA88WeyIQ8uLeGwzdIX1v/4RN1gZpObSPdbXnBSxjg9HFxpPVP5UC gfCapSyQml8LEZ9sCFYrGEc0Ds9OoX/jfyfGvifaBN+wRnC1SNxaK0brQWOq8fM9 hXnz+8A7uIK8FUGPVmb0KMcxwTb7NfxK2dIGq996EjoG/NJvxyDswcElsAi0qbiI AenQ5trAf3Iqc718dl88zo8CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 278264402094301435473740928117271928338971 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-26 10:03:56 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-24 10:03:56 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.bibleresearchinstitute.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 738867301632146769042113259622758471368504855969932561503101919978017359896092839690803938719538089043512086935734641879115267605237665782696652791811069929963919980035481253367386191909722919343555158153437255363160453224494728432368122785898890396269581368752650157583533625364899213546984051056006450757765119937458888820615773250513374711399858183388928930937521249353493515222572980121954254766173419256173738850758685913150167150565238108024243951814393552088344299889741565134738087097280816711693831685190337385464349620720435189089643764180402470717891390915390230202694937098415743513098159917555097636122120138613782707365575817640401912690670909272289864122060657177885578710125026680575006823046575821337370040492573339632963660249849923002102039555469470644537577973422949676637545388178835638294741030366672921201087143631950198387457803101744873491577425589544389002612283755200288342199460250425764446039698065109207343268072196254199773726459492104687254894536896344772782050298709684366289208572004865780881853318319933758079590455982834586968447366662695974558388041814551685575099898909909825247051200914552038432569208513918488196528572761850137258236603985088727303177346229059794919939249818105426161681878671 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) a48363bd95c99822a355b89616a1e970197c6fc7 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bibleresearchinstitute.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) 00f2007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016c2df39e0f0000040300483046022100e94fe8cff0c3c6397676cc73efe3925b3d79c9149ca3a89b9b5d6075ab34e6f0022100b476f5ec57ce0e58b5a6d4f93d2efa8725c75bbe5ce64c12a93aa2b9e20b1db700770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016c2df39e2b0000040300483046022100d485eda25655f51b15c5cd5159c2b75e60cf3f790d1765bcff1b4b2a915dadbe022100e1fb85bac0e00ceaee66fc49d6f1e89f9f202fc1c2773ecc22bdc90f2627a200 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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