precepts4living.org

Issued by R3

About this certificate

This digital certificate with serial number 03:a7:84:52:fd:c4:4f:bb:14:1b:f5:2e:9d:d3:52:09:fa:fc was issued on by Let's Encrypt.

With 13 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=precepts4living.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:a7:84:52:fd:c4:4f:bb:14:1b:f5:2e:9d:d3:52:09:fa:fc
Serial Number (int): 318339902081866497145879740583735619877628
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 74:c0:96:52:da:da:f4:9b:6a:57:26:21:01:39:81:16:58:16:db:da
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): ff:8b:2b:00:b1:b7:db:ef:28:9d:76:f5:ae:8c:ba:eb:3d:3c:c0:d6
Fingerprint (sha256): 62:76:3d:7b:fc:a6:73:97:d8:b1:29:74:4a:8c:62:8d:fc:76:49:92:86:54:f7:9b:34:19:5b:62:18:2b:22:45

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate precepts4living.org

13

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for precepts4living.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

admiralroof.com
bestslotsite.com
bobfosterboxing.com
infinitearbitrage.com
lgbtqbears.com
madeinboho.com
mammaononmamma.com
mikethereturn.com
precepts4living.org
rockerssoftball.com
standardlegalwill.com
timothygilmour.org
ypsilantihomes.com

Other certificates including the domain name precepts4living.org

(limited to 100 certificates)
blood.vc
cng.world
precepts4living.org
modalatmaintowns.ca
furcel.club
precepts4living.org
pet.clinic
precepts4living.org
5272653.ca
precepts4living.org
5272653.ca
musicoldies.ca
5272653.ca
schoolcateringequipment.com.sanm.co.za
precepts4living.org
musicoldies.ca
tempt.com.rheast.llc
musicoldies.ca
musicoldies.ca
audio.bible
musicoldies.ca
precepts4living.org
precepts4living.org
musicoldies.ca
musicoldies.ca
5272653.ca
precepts4living.org
precepts4living.org
5272653.ca
musicoldies.ca
art.estate
realestateowned.org
precepts4living.org
precepts4living.org
musicoldies.ca

Certificate

The complete raw certificate details for precepts4living.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIF5DCCBMygAwIBAgISA6eEUv3ET7sUG/UundNSCfr8MA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDA0MjcwNDM1MjdaFw0yNDA3MjYwNDM1MjZaMB4xHDAaBgNVBAMT
E3ByZWNlcHRzNGxpdmluZy5vcmcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDdDPtV6b6GM7b9JPO/i8jHFa4tvBErQRGPMO3i70eisZBetzVrYL4Ey47u
as8mlqqPbLVvdproVlo0GZo0dC9RXDELwVnv6+a6RS/ZK45fXGi1UBj7SShW0ghr
rPmrrmVj+Zy52HM9dOufrtWeSXJ+/m/UuBVJS1x75Xl2p2zRJm9fkJOL4PUKqjzy
de4KPmCVNkeKfAmSqTSbN+/7GzM1XnMc2C9FIUb6qr7jneIo0b9jSN6rk7XBhr1/
2hS/iaTOra3l/YiQjO1cuJkF4LdSAEELGOuRROU3fpBeABostHr9zEk6wUeqWjvt
19cWHZCdXOQcRR1J/SV8sPTDlEBtAgMBAAGjggMGMIIDAjAOBgNVHQ8BAf8EBAMC
BaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAw
HQYDVR0OBBYEFHTAllLa2vSbalcmIQE5gRZYFtvaMB8GA1UdIwQYMBaAFBQusxe3
WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0
cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5j
ci5vcmcvMIIBCwYDVR0RBIIBAjCB/4IPYWRtaXJhbHJvb2YuY29tghBiZXN0c2xv
dHNpdGUuY29tghNib2Jmb3N0ZXJib3hpbmcuY29tghVpbmZpbml0ZWFyYml0cmFn
ZS5jb22CDmxnYnRxYmVhcnMuY29tgg5tYWRlaW5ib2hvLmNvbYISbWFtbWFvbm9u
bWFtbWEuY29tghFtaWtldGhlcmV0dXJuLmNvbYITcHJlY2VwdHM0bGl2aW5nLm9y
Z4ITcm9ja2Vyc3NvZnRiYWxsLmNvbYIVc3RhbmRhcmRsZWdhbHdpbGwuY29tghJ0
aW1vdGh5Z2lsbW91ci5vcmeCEnlwc2lsYW50aWhvbWVzLmNvbTATBgNVHSAEDDAK
MAgGBmeBDAECATCCAQYGCisGAQQB1nkCBAIEgfcEgfQA8gB3AD8XS0/XIkdYlB1l
HIS+DRLtkDd/H4Vq68G/KIXs+GRuAAABjx4NIVIAAAQDAEgwRgIhAPtp+rg7d5bX
K3fRhUwB/2vPshHfwZM6uHuJ0QYmR9gEAiEA2wkhxvXNX+9yucW82jcjI4F+PHYF
RD6LK57ed8oMiHQAdwB2/4g/Crb7lVHCYcz1h7o0tKTNuyncaEIKn+ZnTFo6dAAA
AY8eDSGgAAAEAwBIMEYCIQDfdFRmzjjr6e5o2SySYerAvgiHTnn6sRlbGF8bukMh
iwIhAKl6k9U49q2iLZhmm1bxaqeAksBYTdTvC+SZPl1014G9MA0GCSqGSIb3DQEB
CwUAA4IBAQBsOvhCRoJ9mj4K/LIdYehimE9ZChJJwmuOjIUNWgOruA2ZFA2ec7GB
U8R7IrF4+4dsIkIVOugxHvGuPYs9Kq2ypBoXd08LBYtsEZtbjdz8G7QJRLxDnQKm
AMffmOdFaqvFzu4OgNNp86mFhQrrtqhBKLnk2xmG5OOvkHx9SwC552ABLxwWRd47
tYYytm6mZqGXMt6Hp0hXynI0Fb7UwetoSC98US/RVW0xFt3HP0bXgM02D+SGQWI8
5VkhRyZY4p/q9vzSB3KW4FoLmklKKDovdj6vp1keiL6DcfXTMybGCWNqykucV3QA
HPzEtcteOxHV9ZBsGJufHfP4f+mHv+u7
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Qz7Vem+hjO2/STzv4vI
xxWuLbwRK0ERjzDt4u9HorGQXrc1a2C+BMuO7mrPJpaqj2y1b3aa6FZaNBmaNHQv
UVwxC8FZ7+vmukUv2SuOX1xotVAY+0koVtIIa6z5q65lY/mcudhzPXTrn67Vnkly
fv5v1LgVSUtce+V5dqds0SZvX5CTi+D1Cqo88nXuCj5glTZHinwJkqk0mzfv+xsz
NV5zHNgvRSFG+qq+453iKNG/Y0jeq5O1wYa9f9oUv4mkzq2t5f2IkIztXLiZBeC3
UgBBCxjrkUTlN36QXgAaLLR6/cxJOsFHqlo77dfXFh2QnVzkHEUdSf0lfLD0w5RA
bQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 318339902081866497145879740583735619877628
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-27 04:35:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-26 04:35:26 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'precepts4living.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27905066951648014991701523262210402159063838335575440821623280120308232980199051204942695835991882664098413403703630117664897966976140836672842266922288503777703065161168894610776699907012586165581487643504175304386662231566982558501974396662931148895547647196699703809653570347363381452444630401305512323725729676903183763698389438315252043939467656239158525206300583752984382470958756587443638601097795752886482092459007516595934289107579803827614822762937425315027807508432673368060512876370482254561929533630473107455452083484165858749220568588617144064632796956436578837861612678628295675938832538025619012993133
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							74c09652dadaf49b6a572621013981165816dbda
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (258 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admiralroof.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestslotsite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bobfosterboxing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'infinitearbitrage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lgbtqbears.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'madeinboho.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mammaononmamma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mikethereturn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'precepts4living.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rockerssoftball.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'standardlegalwill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'timothygilmour.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ypsilantihomes.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f20077003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018f1e0d21520000040300483046022100fb69fab83b7796d72b77d1854c01ff6bcfb211dfc1933ab87b89d1062647d804022100db0921c6f5cd5fef72b9c5bcda372323817e3c7605443e8b2b9ede77ca0c887400770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018f1e0d21a00000040300483046022100df745466ce38ebe9ee68d92c9261eac0be08874e79fab1195b185f1bba43218b022100a97a93d538f6ada22d98669b56f16aa78092c0584dd4ef0be4993e5d74d781bd
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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