online.safeministrytraining.com.au

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:c8:fa:a4:1d:9c:1b:32:7b:2f:97:e7:7a:02:8c:ac:49:de was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=online.safeministrytraining.com.au

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c8:fa:a4:1d:9c:1b:32:7b:2f:97:e7:7a:02:8c:ac:49:de
Serial Number (int): 329726490315657350293912506983798580988382
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 38:1d:44:ac:27:5c:28:79:9f:0b:17:bf:6e:b0:30:6b:46:7c:a6:a5
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ad:bd:67:62:53:dc:c9:71:eb:1b:90:02:e5:8c:37:b2:42:63:2f:ce
Fingerprint (sha256): 65:6e:8e:5e:af:ae:d8:c7:a2:b6:7b:62:bd:be:7c:70:f9:18:81:06:d5:ba:ba:42:14:76:4f:de:37:f1:17:c5

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate online.safeministrytraining.com.au

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for online.safeministrytraining.com.au

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

online.safeministrytraining.com.au
www.online.safeministrytraining.com.au

Other certificates including the domain name safeministrytraining.com.au

(limited to 100 certificates)
safeministrycheck.com.au
online.safeministrytraining.com.au
mychurch.safeministrytraining.com.au
safeministrytraining.com.au
online.safeministrytraining.com.au
online.safeministrytraining.com.au
safeministrytraining.com.au
online.safeministrytraining.com.au
online.safeministrytraining.com.au
mychurch.safeministrytraining.com.au
mychurch.safeministrytraining.com.au
*.safeministrytraining.com.au
mychurch.safeministrytraining.com.au
safeministrytraining.com.au
mychurch.safeministrytraining.com.au
online.safeministrytraining.com.au
online.safeministrytraining.com.au
*.inc.safeministrycheck.com.au
*.safeministrycheck.com.au
mychurch.safeministrytraining.com.au
mychurch.safeministrytraining.com.au
mychurch.safeministrytraining.com.au
mychurch.safeministrytraining.com.au
safeministrytraining.com.au
online.safeministrytraining.com.au
*.safeministrytraining.com.au
mychurch.safeministrytraining.com.au
online.safeministrytraining.com.au
online.safeministrytraining.com.au
*.safeministrytraining.com.au
safeministrytraining.com.au
safeministrytraining.com
safeministrytraining.com.au
online.safeministrytraining.com.au
safeministrytraining.com.au
online.safeministrytraining.com.au
mychurch.safeministrytraining.com.au
safeministrytraining.com.au
online.safeministrytraining.com.au
*.safeministrycheck.com.au
*.safeministrytraining.com.au
safeministrytraining.com.au
online.safeministrytraining.com.au
safeministrytraining.com.au
safeministrytraining.com.au
*.safeministrycheck.com.au
safeministrytraining.com.au
safeministrycheck.com.au
*.safeministrycheck.com.au
safeministrytraining.com.au
*.safeministrytraining.com.au

Certificate

The complete raw certificate details for online.safeministrytraining.com.au in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFpDCCBIygAwIBAgISA8j6pB2cGzJ7L5fnegKMrEneMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTAzMTQxMzQyMjBaFw0x
OTA2MTIxMzQyMjBaMC0xKzApBgNVBAMTIm9ubGluZS5zYWZlbWluaXN0cnl0cmFp
bmluZy5jb20uYXUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaq03M
kC7aTG8iCVB8KeUXZtrj0DOEAJT0YHUrBCSYzDIP1Y/ZmKTyA/3AWVb/Sl+dtoh5
S1ElAB/NnW7fwEvcnsQ+lTINDv9zQLpQRL/3MRG05idxSHZ20z4TIZBMnwz2X8f+
E8ESUbDWS6coV9rteLBxPlDhMj/F5a2TL9DZfAplDWT/KpM1X1kIIAmoLT5el87C
5a9GCxY5oh4ZEmFzTmtFl01sDpdIe1VSBoX89qgb0sgrIgEfzFKwvLEOqJGDggdM
jxapZfwbmOptCQtSOh0q+S9uOF3vdbf3whxZFcvnrT/DLPv8ridA0MOFX0NK+kNU
/FjyHy2ApEGwER+LAgMBAAGjggKfMIICmzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0l
BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYE
FDgdRKwnXCh5nwsXv26wMGtGfKalMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZF
Ze/zqOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3Au
aW50LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQu
aW50LXgzLmxldHNlbmNyeXB0Lm9yZy8wVQYDVR0RBE4wTIIib25saW5lLnNhZmVt
aW5pc3RyeXRyYWluaW5nLmNvbS5hdYImd3d3Lm9ubGluZS5zYWZlbWluaXN0cnl0
cmFpbmluZy5jb20uYXUwTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMB
AQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEE
BgorBgEEAdZ5AgQCBIH1BIHyAPAAdgDiaUuuJujpQAnohhu2O4PUPuf+dIj7pI8o
kwGd3fHb/gAAAWl8p20OAAAEAwBHMEUCIEL3l5VXdFBjC+uy1TdIgjmM+WlHsC4x
K/uOCQpYrNVIAiEAuI/lmaU7RhfR9FS9OrsnQZJxLMHCt3RFEnzMEmHRiqMAdgAp
PFGWVMg5ZbqqUPxYB9S3b79Yeily3KTDDPTlRUf0eAAAAWl8p20OAAAEAwBHMEUC
IQD0te9ykV4D0bN+M6DHawLE2MnTsU6MWszdyV8fdgnLXgIgIFo1veNm3XnawVoQ
6pdvxjYBRgbScZyCcyW/Fqhx5fcwDQYJKoZIhvcNAQELBQADggEBAJHq3YcOwcFf
g54krNb6B6RhgkfHu8yzGjmjx2WmFW2YY8Eu1bE6Rd64NXeDCeaFwMNorKM8xu0X
6+LTNsDbk7z0kQuzivyusyACs9Y9lQaE616OdYiXvU3xlMbmcVjS0EOtJ+x8GAPv
1Sfyhixxf2WhwbYq25chXQO90plph5y99T0WpNlQvrKV/fNJScsa9SzG9aBgpUtp
0XJsycBx7TKNMG6oXZUF5vcqWTMQlhn3JMOe75qxa+/5OKf6B956KUBlEel/ivGi
3h9ent7OBpss8xbD7Nl2QDx5IdkJoQa1JqGT762Qm/Kikms6qOkPGWOCw6/O/gmh
1FxFmj/z2xs=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2qtNzJAu2kxvIglQfCnl
F2ba49AzhACU9GB1KwQkmMwyD9WP2Zik8gP9wFlW/0pfnbaIeUtRJQAfzZ1u38BL
3J7EPpUyDQ7/c0C6UES/9zERtOYncUh2dtM+EyGQTJ8M9l/H/hPBElGw1kunKFfa
7XiwcT5Q4TI/xeWtky/Q2XwKZQ1k/yqTNV9ZCCAJqC0+XpfOwuWvRgsWOaIeGRJh
c05rRZdNbA6XSHtVUgaF/PaoG9LIKyIBH8xSsLyxDqiRg4IHTI8WqWX8G5jqbQkL
UjodKvkvbjhd73W398IcWRXL560/wyz7/K4nQNDDhV9DSvpDVPxY8h8tgKRBsBEf
iwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 329726490315657350293912506983798580988382
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-14 13:42:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-12 13:42:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'online.safeministrytraining.com.au'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27604423585346712650468954037995425456007793798726542772647549381399251402256072785129390931721247172689532510510956534803344400943787294581097975351985229818894184515113797037385208127858357616350772664552443083122429737758867878972674842707732482754807440326530118420945559540915413985251653759304194276305446687384910507567847713838695367529039554384104624137975568846479901138723836189908816867205007447019930258313492141938682613147060446418588572388400966495628128521621578040732899679769935548039486423289790065102783155957651058283035958844738848251587622065370055416388418046027875770861066042853357482221451
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							381d44ac275c28799f0b17bf6eb0306b467ca6a5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (78 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'online.safeministrytraining.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.online.safeministrytraining.com.au'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe000001697ca76d0e0000040300473045022042f79795577450630bebb2d5374882398cf96947b02e312bfb8e090a58acd548022100b88fe599a53b4617d1f454bd3abb274192712cc1c2b77445127ccc1261d18aa3007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001697ca76d0e0000040300473045022100f4b5ef72915e03d1b37e33a0c76b02c4d8c9d3b14e8c5accddc95f1f7609cb5e0220205a35bde366dd79dac15a10ea976fc636014606d2719c827325bf16a871e5f7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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