www.walkbyfaithchurch.org
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 04:a6:da:bd:15:a3:4c:52:00:8e:8e:e7:df:23:e0:f5:d0:88 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.walkbyfaithchurch.org
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:a6:da:bd:15:a3:4c:52:00:8e:8e:e7:df:23:e0:f5:d0:88Serial Number (int): 405226770121972558425934136705091812839560
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 42:b6:73:cb:08:fa:e6:e7:49:b2:1f:b7:26:89:5a:4f:b7:b8:75:64
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 52:63:1b:dc:51:6e:14:71:7a:76:39:0c:8f:8e:0e:84:4e:ec:8e:14
Fingerprint (sha256): 6c:e4:42:33:c7:30:f1:5f:85:98:ae:37:45:89:b4:3a:39:68:4f:38:58:98:21:79:46:87:13:ef:c7:3c:b9:95
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate www.walkbyfaithchurch.org
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.walkbyfaithchurch.org
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
walkbyfaithchurch.org
www.walkbyfaithchurch.org
www.walkbyfaithchurch.org
Other certificates including the domain name walkbyfaithchurch.org
(limited to 100 certificates)
www.walkbyfaithchurch.org
walkbyfaithchurch.org
walkbyfaithchurch.org
www.walkbyfaithchurch.org
www.walkbyfaithchurch.org
www.walkbyfaithchurch.org
www.walkbyfaithchurch.org
walkbyfaithchurch.org
walkbyfaithchurch.org
www.walkbyfaithchurch.org
www.walkbyfaithchurch.org
walkbyfaithchurch.org
walkbyfaithchurch.org
walkbyfaithchurch.org
www.walkbyfaithchurch.org
walkbyfaithchurch.org
walkbyfaithchurch.org
walkbyfaithchurch.org
walkbyfaithchurch.org
walkbyfaithchurch.org
walkbyfaithchurch.org
www.walkbyfaithchurch.org
www.walkbyfaithchurch.org
www.walkbyfaithchurch.org
www.walkbyfaithchurch.org
walkbyfaithchurch.org
walkbyfaithchurch.org
www.walkbyfaithchurch.org
www.walkbyfaithchurch.org
walkbyfaithchurch.org
walkbyfaithchurch.org
walkbyfaithchurch.org
www.walkbyfaithchurch.org
walkbyfaithchurch.org
walkbyfaithchurch.org
walkbyfaithchurch.org
walkbyfaithchurch.org
Certificate
The complete raw certificate details for www.walkbyfaithchurch.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGMzCCBRugAwIBAgISBKbavRWjTFIAjo7n3yPg9dCIMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODA2MjQwODEwNDdaFw0x ODA5MjIwODEwNDdaMCQxIjAgBgNVBAMTGXd3dy53YWxrYnlmYWl0aGNodXJjaC5v cmcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5jf0TLgc50n7pYu83 5e0iUPYfGFFAvZcd9gI+bv+GmlcErfjQSLgI5/a6WSuD6BKb1A3fZ/pvNs5nj7eg CK8q/eKh++PSLcatnKeoKzWv+HczAY8YNvSoBo0rRJMRSwgl2dkvB8vrrWSZCtqQ UzsaCiJf2aGw6wTsziGG9E7qM4GLNuDrhjFpRqmW9JlVlZ7d5yKct89tRv4VVFJ8 8lB62MmuzJAU5XO/HaL+V35S8SXlbDlvlPP8kSrlYYOp+mjXO0cxUtaRM6qTMS8U C5CE31LZMjvTLMhMlzOLQOb9ytIMdTisNlMEgFuKjzd3OPuGEGlJigtsNDwG26YO Eq1FAgMBAAGjggM3MIIDMzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYB BQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFEK2c8sI+ubn SbIftyaJWk+3uHVkMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8G CCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxl dHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxl dHNlbmNyeXB0Lm9yZy8wOwYDVR0RBDQwMoIVd2Fsa2J5ZmFpdGhjaHVyY2gub3Jn ghl3d3cud2Fsa2J5ZmFpdGhjaHVyY2gub3JnMIH+BgNVHSAEgfYwgfMwCAYGZ4EM AQIBMIHmBgsrBgEEAYLfEwEBATCB1jAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5s ZXRzZW5jcnlwdC5vcmcwgasGCCsGAQUFBwICMIGeDIGbVGhpcyBDZXJ0aWZpY2F0 ZSBtYXkgb25seSBiZSByZWxpZWQgdXBvbiBieSBSZWx5aW5nIFBhcnRpZXMgYW5k IG9ubHkgaW4gYWNjb3JkYW5jZSB3aXRoIHRoZSBDZXJ0aWZpY2F0ZSBQb2xpY3kg Zm91bmQgYXQgaHR0cHM6Ly9sZXRzZW5jcnlwdC5vcmcvcmVwb3NpdG9yeS8wggED BgorBgEEAdZ5AgQCBIH0BIHxAO8AdgBVgdTCFpA2AUrqC5tXPFPwwOQ4eHAlCBcv o6odBxPTDAAAAWQxD1raAAAEAwBHMEUCIFeiYY0mF8mUtY/iGEvYdeJiMb3iC2Da KCFh1brCiO49AiEAvkOToU9VK7q5m9/vbCM/cVc2InZzQ/RITqqo8u8tKcUAdQAp PFGWVMg5ZbqqUPxYB9S3b79Yeily3KTDDPTlRUf0eAAAAWQxD1rHAAAEAwBGMEQC IB1xY2+TPGst+eJYL+OgmSmom93cCJXlg99FOoGjO3cOAiBTLcI54ODj0hGl79tQ bkWlaKCFZQDvTR0UetDSdLuYqDANBgkqhkiG9w0BAQsFAAOCAQEAETSSxcvuiOkr bRpGeBNN5KBXh1/i0Ut+OMEhrPZpqgq1yIIsILgCbqW4c1hZpsQAqFeCHC4cBt46 yfk2q1UroqXFezhebKtf/sBkUf1aQWGQ7v6UmlGkzQcz5N+J1nnM+03rZfnruV6S UPYV39zekIVGO/5/kJgKkXIBBqSBngDrn2y6wpsjJ2ymCc7XdjmomySbibFhQA9M 3pJBe7fAlw2BH9okh7NTiOlr9UcXchh6Dfw8rWNZn8jaehNojBuEZ5clmG8niRR9 u22w+OhPhbltR3M5MEMF2rru/rVc3vL8s6lNnyDzeG9HLHyurEZ4fjPUTyoUey6W f0YahNlnZA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuY39Ey4HOdJ+6WLvN+Xt IlD2HxhRQL2XHfYCPm7/hppXBK340Ei4COf2ulkrg+gSm9QN32f6bzbOZ4+3oAiv Kv3iofvj0i3GrZynqCs1r/h3MwGPGDb0qAaNK0STEUsIJdnZLwfL661kmQrakFM7 GgoiX9mhsOsE7M4hhvRO6jOBizbg64YxaUaplvSZVZWe3ecinLfPbUb+FVRSfPJQ etjJrsyQFOVzvx2i/ld+UvEl5Ww5b5Tz/JEq5WGDqfpo1ztHMVLWkTOqkzEvFAuQ hN9S2TI70yzITJczi0Dm/crSDHU4rDZTBIBbio83dzj7hhBpSYoLbDQ8BtumDhKt RQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 405226770121972558425934136705091812839560 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-24 08:10:47 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-22 08:10:47 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.walkbyfaithchurch.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23424103594091970005088703254662566713487486464541481423385617610916796510555980156395787874535738527299845204579970934232466385911067120668083855030500178379912271931612701082291695503768642446773561910904174995885071311975989859246810659366838231553059085713330536552865913276152973398841038635164714447069286692613294555770653151019201147104555641832128279906963587485971656293955948186032709596151973983659450124846648442165501222369716550778898261572619707121893158909015028479513348888270582102111502692848559491525218427781310190150059205536707769434724624837003308280732102534752136361791281205733216230747461 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 42b673cb08fae6e749b21fb726895a4fb7b87564 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'walkbyfaithchurch.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.walkbyfaithchurch.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef0076005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c00000164310f5ada0000040300473045022057a2618d2617c994b58fe2184bd875e26231bde20b60da282161d5bac288ee3d022100be4393a14f552bbab99bdfef6c233f71573622767343f4484eaaa8f2ef2d29c5007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000164310f5ac7000004030046304402201d71636f933c6b2df9e2582fe3a09929a89bdddc0895e583df453a81a33b770e0220532dc239e0e0e3d211a5efdb506e45a568a0856500ef4d1d147ad0d274bb98a8 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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