adfpastoracademy.org

Issued by R3

About this certificate

This digital certificate with serial number 03:b9:07:67:3f:40:87:b6:5f:0c:49:21:f7:64:d0:6a:c8:1c was issued on by Let's Encrypt.

With 9 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=adfpastoracademy.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b9:07:67:3f:40:87:b6:5f:0c:49:21:f7:64:d0:6a:c8:1c
Serial Number (int): 324298936361105687559596718501022438967324
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 04:93:fc:04:0d:34:bb:46:a9:f9:03:30:db:f1:9f:54:7d:f3:f8:39
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): a4:36:42:95:4d:62:e2:18:fa:00:31:03:9b:aa:bb:7c:70:5f:e8:4f
Fingerprint (sha256): 72:bf:67:16:93:ae:5d:ae:a7:8b:cc:31:9c:3b:37:8b:ac:cd:ea:91:35:cc:e0:18:f0:5a:0a:ac:a8:6e:2a:6d

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate adfpastoracademy.org

9

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for adfpastoracademy.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

adfpastoracademy.org
arbitragepodcast.com.faphousesubs4.bdsmsecurity.com.hempsoil.com
cjh.co.in
gayeroticaudio.com
goldonetechnology.com
jonathandavidphotography.com.chiropracticsportsmedicine.com
lonetime.com
trailerskirting.com.quadrant3.com
yoya.shop

Other certificates including the domain name adfpastoracademy.org

(limited to 100 certificates)
adfpastoracademy.org
housedoody.com.tv4.co.za
egyptian.bible
adfpastoracademy.org
atm.vc.homeschooladvocates.org

Certificate

The complete raw certificate details for adfpastoracademy.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0W3cn6jeJZczf70slg0R
s0BSeEuS4JEHng0WMRAnKk5BDQJNxJsEEsiijIqw++kPLmkG0CJO8g7JrlvwYhcR
lPgBWrgS9DrHkR24X7vGAcfBHbFihJwHD5PVagS/QnDypyCEeO3UQsxy7IEWEYwQ
QbfKh120hplC2OAk+PgltYsLfxuya8LWGcpgCgu0LYvycCjWvG7XFLvbNsaaPs6K
0A3PnIDHMbfSFOp+6WRZ69ovE5Jp9Cd/DH4ebBapKBsUlkGIo/ZtP24lcQGPRNW2
1O5Tgh8n7aS6aMJgV18AinkkSSu0rXJCwLNOAT77jeyUVNf/0cpLBXD8cZkj1qoP
ZQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 324298936361105687559596718501022438967324
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-07 05:18:49 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-06 05:18:48 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'adfpastoracademy.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26437980616140628779489616679791800123690334696016936868776713170668412334725863502287811540765311913692848749327161495775266206992236895406811329128212620010174460788628783867224086836254770706595807486744722848372770442504790254936827449284395576923299391895951108808776072960039505666020351387210839041096321979761791828114896686620653342867880211381991277445617745590670850799036555929131735091073972732462336178954087335790265707636927048861959328940311879521386945152441975344273704071728218544104101924881377205207424201920416479896973567974618032145256666598356038563187160960713479160734458907663887250362213
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0493fc040d34bb46a9f90330dbf19f547df3f839
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (267 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adfpastoracademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arbitragepodcast.com.faphousesubs4.bdsmsecurity.com.hempsoil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cjh.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gayeroticaudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goldonetechnology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jonathandavidphotography.com.chiropracticsportsmedicine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lonetime.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trailerskirting.com.quadrant3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yoya.shop'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000750029d03a1bb674aa711cd3035b6557c14f8aa78b4fe8389449eca453f944bd24680000018c42edcb6a000004030046304402207d079e2e438806897ce949f1e130193fa8673880d14a6d20c4db4c1d75b336460220279346967efc2c224cad823f076272684e861c8d2fcf00d77df95bcc52c6efdf00770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018c42edcb9a0000040300483046022100d56f2e5c4b93bb4d0d7e382e80d22842f30ab90df05b655d23bad660b4df003402210095b4a5292cc122054d53cce1391133ff9df2c3db0b042652ac8d249896147599
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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