byronbible.org

Issued by Sectigo RSA Domain Validation Secure Server CA

About this certificate

This digital certificate with serial number 6a:46:b6:86:b8:2d:5d:9c:18:6c:39:70:8c:81:19:3c was issued on by Sectigo Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=byronbible.org

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): 6a:46:b6:86:b8:2d:5d:9c:18:6c:39:70:8c:81:19:3c
Serial Number (int): 141265330405420247505784057111253162300
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: cd:e2:8d:90:04:f1:51:46:86:4d:41:59:0c:44:79:78:e7:03:d5:4f
AuthorityKeyId: 8d:8c:5e:c4:54:ad:8a:e1:77:e9:9b:f9:9b:05:e1:b8:01:8d:61:e1

Fingerprint (sha1): de:08:f1:b3:43:a6:de:6e:22:b9:c1:a4:f1:8a:db:38:99:0e:16:e7
Fingerprint (sha256): 67:af:14:d0:c0:4f:5c:d7:87:65:00:14:08:72:e4:9c:52:ff:73:2c:6d:73:66:93:91:01:bb:f5:6a:69:91:47

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com

Check the revocation status for certificate byronbible.org

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for byronbible.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

byronbible.org
www.byronbible.org

Other certificates including the domain name byronbible.org

(limited to 100 certificates)
lists.byronbible.org
customers.tigertech.net
lists.nikibikidress.com
lists.0100101110101101.org
byronbible.org
customers.tigertech.net
web03.tigertechnologies.us
lists.brookfieldfarm.com
lists.bigteezesalon.com
*.thewholepup.com
*.danshazlett.com
web03.tigertechnologies.us
customers.tigertech.net
customers.tigertech.net
web03.tigertechnologies.us
lists.brookfieldfarm.com
lists.0100101110101101.org
lists.0100101110101101.org
lists.swimkingpools.com
lists.bwajakarta.org
web03.tigertechnologies.us
lists.dhaudioandhometheater.com
web03.tigertechnologies.us
*.catstockblog.com
byronbible.org
lists.bigteezesalon.com
byronbible.org
*.somatic-in.com
byronbible.org
lists.brookfieldfarm.com
*.doncoomeslaw.com
lists.upsstorage.com
customers.tigertech.net
customers.tigertech.net
lists.0100101110101101.org
*.doncoomeslaw.com
*.wickedblog.com
byronbible.org
*.somatic-in.com
web03.tigertechnologies.us
web03.tigertechnologies.us
customers.tigertech.net
*.wickedblog.com
*.wickedblog.com
customers.tigertech.net
*.danhazlett.com
live.byronbible.org
lists.byronbible.org
lists.byronbible.org
lists.rasterms.com
lists.byronbible.org
lists.iafflocal5031.org
lists.inuverse.com
*.thewholepup.com
customers.tigertech.net
*.thewholepup.com
*.tylerkb.com
*.doncoomeslaw.com
live.byronbible.org
lists.brookfieldfarm.com

Certificate

The complete raw certificate details for byronbible.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnHFZOfRG6HCfI8sdMg+
g7K3VB9w7zKhvjj2iaKJiZ5su8QFtp5hWloCZICXLUKbufVtz224vLOV1GQpGd8y
5xR6d15ll/qLnq5I1YSA4GGJ5meGbsNFTcdYnJg2QbCU6yORVBKbvitUYRSkr7bI
ngdzsERXWKiJWh1UOSnKGsYSdun+l5E41Da0pE+8hfd+1rAeHtCezabMmQiUx2vo
pRgJC1KUDBZ0Z/8H45uW1h2t7c9hfOtLR6Pl9rW/FK9gSu/xU0zbRlrOI9fHwntH
uiFQ7d43XJFjMKpnwSwE9fD/DDf1v5HUUTKB2QUTF5qqRCYiGZcFTFC+cODz8JH/
XwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 141265330405420247505784057111253162300
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Domain Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-15 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-14 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'byronbible.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22526520890014801209177241315679854815753235831475857980294831009065530579445961764192998035373385611897405062588819342956952673746908161876193039148964925046533570674980746871329988995187091920423450868258381668419262536382407677932185243143999522481229974408551747289550249283586184794019657361168408535191666032828044481287768204672802297637363321632940196085894237036797678375783628561962853729629487775090701063120639475578366020517341756313479750188121397564900931913081659284281712412164589238559368837844157826273150774565714933528629127602600000062979555801574557878347876067063161322176945684142556642934623
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8d8c5ec454ad8ae177e99bf99b05e1b8018d61e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cde28d9004f15146864d41590c447978e703d54f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a000001878558655b00000403004730450220157931c249af2388b0db2866019f60cfc42e47990eac05c10da4c9bb7a26a877022100a653bf344fd50dc93da9609a27baee737680de94118b0c925e237e6f5b03ccce0076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000187855865d0000004030047304502204c330dbcbd8b8b024bc882407681fd7ba8b576ceac2352523748c094ff6327ba0221008c36da485dbf7419a6fbe646b0a5fdee0bef533c1bef23193c73f9f75031d55e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'byronbible.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.byronbible.org'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		003d85cf999f6198fb66fc36f8b1067c34e0ab387d4f74069302d4a5dd4479e1fa57cde2648bf51113b560399ea86ecaf9a1d85d6f2068d2200b5a517d4bee311a997df9f79925a37f772742ccf8eafc0d1695abfb8498daaa7b234777f0d04208e613ee150b78062b5038ea166e6f435a9d800c1d5dbfc44705da86ffc2b41bd3b3a612a7a1080acee9a4da79a3dcf2b8e2a2cd50b1be65cceac50a2f5e860e95f23a6a57ae4dc8cc18895eb2156160c5da4be004a18ac60430b38f47932199c047296ca7a0188c99f6ce4691dd19f755159263428fd9ff57a12a79fe9ea19755da667b06233aa93797ae6c3ff5f65ce487583401af3b8ac9d4ff9e133fbf8c97