www.vivechurch.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:8b:82:20:08:3f:40:75:d3:df:bd:e4:cf:0d:24:ae:eb:68 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.vivechurch.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:8b:82:20:08:3f:40:75:d3:df:bd:e4:cf:0d:24:ae:eb:68
Serial Number (int): 308809072757513299092350489593471438875496
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 53:4f:0b:89:36:05:30:82:79:7e:15:4f:89:70:db:b1:1e:39:61:bc
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 9e:02:d4:15:e3:85:51:be:cc:51:2d:62:da:f0:fa:96:97:db:3b:87
Fingerprint (sha256): 8c:4b:b6:7e:0a:d7:67:39:1a:c1:17:1f:49:c1:c1:50:08:53:3b:02:4e:ec:2f:3f:25:b9:03:38:78:5e:ae:09

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.vivechurch.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.vivechurch.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.vivechurch.org

Other certificates including the domain name vivechurch.org

(limited to 100 certificates)
jonogould.com
finnianoneill.ie
groups.vivechurch.org
robinhood.casino
vivechurch.org
www.vivechurch.org
www.osir.io
www.dawidfrontend.com
vivechurch.org
www.vivechurch.org
watching.plus
ngohem.com
omrayala.com
blemish.it
libi.com
www.vivechurch.org
vivechurch.org
www.urbankirana.in
denistruffaut.fr
jakesticker.com
iluminaihealth.com
heav.fr
board-grab.com
akicon-app.jp
www.irechargeapp.com
maps.boarda.io
debug.saveinbudapest.com
loco.app
api.splitfare.app
job-listings.ismaaa.me
connect.vivechurch.org
rutasapp.com
clubes.rebus.com.co
www.freemanlam.io
gun.games235.com
web.funfinance.app
docs.anlikers.ch
vivechurch.org
www.vivechurch.org
www.startling.app
intellihealth.com.au
www.vivechurch.org
api.splitfare.app
pompeoimoveis.com.br
wheregottext.com
www.calkicker.com
live.vivechurch.org
akillisey.com
vivechurch.org
vivechurch.org
vivechurch.org
magalibs.com
vivechurch.org
dev.yoga
convite.bipa.app
www.vivechurch.org
live.vivechurch.org
www.sciber.dev
pierfrancescosoffritti.com
clock.vivechurch.org
www.kolarikovi.cz
app.cattlemanagementsystem.com
speakers.chicagoroboto.com
www.iamdragusincristian.com
www.iposcard.co.id
stage.player.lumiere.is
docs.zylitics.io
www.vivechurch.org
live.vivechurch.org
www.vivechurch.org
www.kolarikovi.cz
vivechurch.org
www.jub-mueller.de
live.vivechurch.org
barkiri.co.kr
allogic.com.br
www.vivechurch.org
www.vivechurch.org
www.vivechurch.org
cp5661949303980032.order.place
spotifybuddy.com
www.draftcraft.co
live.vivechurch.org
www.anupbhandari.com
alain.softclik.com
ishaanmalhi.me
www.vivechurch.org
vivechurch.org
www.vivechurch.org
connect.vivechurch.org
xsfera.ru
convite.bipa.app
vivechurch.org
apply.buildyourcareerwi.org
vacunainfluenza.com.mx
www.vivechurch.org
asamblea.antp.org.mx
vivechurch.org
vivechurch.org
vivechurch.org

Certificate

The complete raw certificate details for www.vivechurch.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg1vliasWYLfEUvhYxktb
gc/1TamzkFT93wbVbjY/Y1cN8o0i4WpbLriFweEHafIUkSqOzrkdzXksQkYsG0G8
PCzqEKRGPUEarGN6TXPkN92J/7dq7W31nUejwQ5CIyyPwgKMn8/U2gVKly6bWJZ3
WPoWXG0g8aodoI2/C+K5Uf1WiDjSY+Wc3c2F9XYeGVItwAsCmrbi1ViuqMO9dBGx
HyFGTR8KSOnghaPFRiHpMfDMvM/EBrZDfY9xZZAdl5zWg+HDvzKZUfBpCv2PfAG0
Bmeclb7ofLKllIIpObG0NdITzUlZGIt79pO0i0lABT1m50a2NnVslccWu6MAOEpX
2wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 308809072757513299092350489593471438875496
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-20 22:23:16 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-18 22:23:16 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.vivechurch.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 16582533868691809208670019034676582572876860612311999026597018853747296694754892356490579515804502956658743783284059329768053738400025330933174481181491713719584561484530844952907268308486938475541028096451406197731542638655834559329996504248561186205834219412626666160893073286042446336531894607832714673155832056615068840507729803125921182080911208370329859401627638248639829031759861195535230005493320938291277176686007617185942753251183032560891038849695959528404079408159296552414129344839176317028246181268919301061386659353772352491835105806809000337404424010353504684624962329030609631242275327435583705995227
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							534f0b8936053082797e154f8970dbb11e3961bc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vivechurch.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf64000001641f8262ee0000040300483046022100b5b79cadb694189647e26bc1da433440541fe603c21dc042552f943f6b6f2c5b022100ea44c7c07f7629fac519cab950b4c511fafc3c7185fabc7909f3698aee6bc143007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001641f8262fd0000040300473045022100a1a1fef74e6dfcc6da6c53283e3937aa9824e47d2fb7fbac1ec476d70afbe007022042a9b4217298189484edb03ea40c2f958a3c8e73435644d06fee88de7cfe130e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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