equip.bible
Issued by R3
About this certificate
This digital certificate with serial number 03:cc:65:7f:cb:2d:3c:95:8a:08:57:25:df:7d:09:1b:32:89 was issued on by Let's Encrypt.
With 12 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=equip.bible
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:cc:65:7f:cb:2d:3c:95:8a:08:57:25:df:7d:09:1b:32:89Serial Number (int): 330889376217340663649480049106257104810633
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 4c:bd:8a:03:06:ee:42:90:03:c8:e3:c3:90:81:71:8a:17:7e:54:75
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): db:e5:42:d5:47:32:cf:d0:30:18:53:a4:0f:9f:55:7e:73:53:ec:27
Fingerprint (sha256): 74:27:f0:80:24:f0:83:43:24:49:b3:99:ad:b6:fd:3b:6c:1e:01:74:e2:91:d7:4c:b2:53:34:b1:d8:ea:7a:22
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate equip.bible
12
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for equip.bible
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
arbitrage.academy
autofundinggroup.com
dancebtc.com.sawomenconnect.com
earthambassador.net
equip.bible
gxl.co.in
helganeumer.com
marketing4vip.com.bhaskae.com
reidenouerfinancialgroup.com.fishingchartervenice.com
sensorstv.com.f1xed.com
topmiamiseo.com
viraltrafficstorm.com
autofundinggroup.com
dancebtc.com.sawomenconnect.com
earthambassador.net
equip.bible
gxl.co.in
helganeumer.com
marketing4vip.com.bhaskae.com
reidenouerfinancialgroup.com.fishingchartervenice.com
sensorstv.com.f1xed.com
topmiamiseo.com
viraltrafficstorm.com
Other certificates including the domain name equip.bible
(limited to 100 certificates)
equip.bible
equip.bible
www.marylandpoolbuilders.com
actionalert.ca
www.jetomat.com
equip.bible
thrill.vc
canibuild.de
www.librari.com
equip.bible
equip.bible
sanb.co.za
www.tupper-ware.com
www.mycapital.org
impossible.ca
wwwytmp3.cc
zinnia.exchange
equip.bible
sarinanaik.com.equip.bible
defis.ec
equip.bible
www.isgucu.click
thebiblecourse.ca
redzoneperformance.com
equip.bible
www.marylandpoolbuilders.com
actionalert.ca
www.jetomat.com
equip.bible
thrill.vc
canibuild.de
www.librari.com
equip.bible
equip.bible
sanb.co.za
www.tupper-ware.com
www.mycapital.org
impossible.ca
wwwytmp3.cc
zinnia.exchange
equip.bible
sarinanaik.com.equip.bible
defis.ec
equip.bible
www.isgucu.click
thebiblecourse.ca
redzoneperformance.com
Certificate
The complete raw certificate details for equip.bible in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF/DCCBOSgAwIBAgISA8xlf8stPJWKCFcl330JGzKJMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzExMTIyMjQzMDVaFw0yNDAyMTAyMjQzMDRaMBYxFDASBgNVBAMT C2VxdWlwLmJpYmxlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9Ifq 6PLoOvGgIHKnwlnpWWCCU1AM4MSesiIccrmvK+kA+Q0Er1R9e4+mS8/cLZ7QqaKj fAeMYSkooMHwvgLbHk6TMgJBYf6zNLAwRbFauEabvLTZv2/jMmjxQJkOpQjVgrlZ eBjBplhyPruIDfC36dmXWfn0JG9eJ8fQOaIpjZ2VV2REKeOGSsyWUS/7wG39Ubx6 Wvhxtc0PGZSUYf9fSatbEtazy/eD2QDan8w6aI6k3fkFxI7rno94YcV3rDpdNc+f ziB84I1IKQsRjnRD3kwPgCjyyNFMsFu4OGYwMJAhA5q9SMuVC9CG3WTZmxq4BDnx sRHuWRQiaDLFIN3p2QIDAQABo4IDJjCCAyIwDgYDVR0PAQH/BAQDAgWgMB0GA1Ud JQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQW BBRMvYoDBu5CkAPI48OQgXGKF35UdTAfBgNVHSMEGDAWgBQULrMXt1hWy65QCUDm H6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGGFWh0dHA6Ly9yMy5v LmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmkubGVuY3Iub3JnLzCC ASwGA1UdEQSCASMwggEfghFhcmJpdHJhZ2UuYWNhZGVteYIUYXV0b2Z1bmRpbmdn cm91cC5jb22CH2RhbmNlYnRjLmNvbS5zYXdvbWVuY29ubmVjdC5jb22CE2VhcnRo YW1iYXNzYWRvci5uZXSCC2VxdWlwLmJpYmxlgglneGwuY28uaW6CD2hlbGdhbmV1 bWVyLmNvbYIdbWFya2V0aW5nNHZpcC5jb20uYmhhc2thZS5jb22CNXJlaWRlbm91 ZXJmaW5hbmNpYWxncm91cC5jb20uZmlzaGluZ2NoYXJ0ZXJ2ZW5pY2UuY29tghdz ZW5zb3JzdHYuY29tLmYxeGVkLmNvbYIPdG9wbWlhbWlzZW8uY29tghV2aXJhbHRy YWZmaWNzdG9ybS5jb20wEwYDVR0gBAwwCjAIBgZngQwBAgEwggEFBgorBgEEAdZ5 AgQCBIH2BIHzAPEAdwBIsONr2qZHNA/lagL6nTDrHFIBy1bdLIHZu7+rOdiEcwAA AYvF6tvFAAAEAwBIMEYCIQDhSJHXTVQYVSaxKaAQ1GWrpEK3i5LskxPCQhiENceg vgIhAIzplLMJZBvljjpJbfHNPFadFpgTnQ8DWoE8xx8q5F5UAHYAO1N3dT4tuYBO izBbBv5AO2fYT8P0x70ADS1yb+H61BcAAAGLxerbywAABAMARzBFAiAsMa8zdnE2 f2Y32i1BzXn6ZdSP3XZFMzlV5JrvfGOPUwIhAMkfA3yTLsEYu3/0YYAUy8JEQ9GC FgL78iH/xwHvN6OgMA0GCSqGSIb3DQEBCwUAA4IBAQB/WwIpvRauktGJk5os/P26 ac6oBqMOTS5ZhNh9PQKsPPDp6cKXwxbC5X6PLpsKp0j4zzjn7bMJqYEiSW3hfrk+ 7C8Ds58piyuOJAmnIq8nIqf4vhUnvAxQZFg+QETPLSaPLDLK5SBsaXe7Zl0J4ZZS XxATcPT+827MFxZt7bBpW3Rm7gxHWpg8jW2NqgFQqMIYzQlTMgnOxoZ519AEuDa1 UZfsIm0G44qbycaFS1wLdAYpAjm3gyVhGD7GVhvgg2dqy4ETZh5PmYkee9+BCKj3 oImP7fJusbpu88OL+KIrCRFZ1I75zO3ymbCzhD8TNDjHpLfP7w469w4kEFJehsa/ -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9Ifq6PLoOvGgIHKnwlnp WWCCU1AM4MSesiIccrmvK+kA+Q0Er1R9e4+mS8/cLZ7QqaKjfAeMYSkooMHwvgLb Hk6TMgJBYf6zNLAwRbFauEabvLTZv2/jMmjxQJkOpQjVgrlZeBjBplhyPruIDfC3 6dmXWfn0JG9eJ8fQOaIpjZ2VV2REKeOGSsyWUS/7wG39Ubx6Wvhxtc0PGZSUYf9f SatbEtazy/eD2QDan8w6aI6k3fkFxI7rno94YcV3rDpdNc+fziB84I1IKQsRjnRD 3kwPgCjyyNFMsFu4OGYwMJAhA5q9SMuVC9CG3WTZmxq4BDnxsRHuWRQiaDLFIN3p 2QIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 330889376217340663649480049106257104810633 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-12 22:43:05 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-10 22:43:04 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'equip.bible' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30869169886668732261195159559274075398888593312192275735537733929560254895691215221220552769283674074263208121282358432921436837527117247157428180900705067566777208223292007668439339843012435883267026066014825406315955577737659606726797453933622139587375399671840419716250449884001903016865664446429539844602441241952706464795774894974176571485800953694667254629162247865179843061963571793637788229473175534783280382948174123813715371501407911139217879837460845807271769908755057462018138011357115203247659697342262141052374774250019112698728306066155418535719439921193421476996478712556629865265022762958244965902809 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 4cbd8a0306ee429003c8e3c39081718a177e5475 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (291 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arbitrage.academy' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autofundinggroup.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dancebtc.com.sawomenconnect.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'earthambassador.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'equip.bible' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gxl.co.in' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helganeumer.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketing4vip.com.bhaskae.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reidenouerfinancialgroup.com.fishingchartervenice.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sensorstv.com.f1xed.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'topmiamiseo.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viraltrafficstorm.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f100770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018bc5eadbc50000040300483046022100e14891d74d54185526b129a010d465aba442b78b92ec9313c242188435c7a0be0221008ce994b309641be58e3a496df1cd3c569d1698139d0f035a813cc71f2ae45e540076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018bc5eadbcb000004030047304502202c31af337671367f6637da2d41cd79fa65d48fdd7645333955e49aef7c638f53022100c91f037c932ec118bb7ff4618014cbc24443d1821602fbf221ffc701ef37a3a0 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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