bereanchristian.com

Issued by R3

About this certificate

This digital certificate with serial number 04:42:49:bf:5a:49:95:7a:2f:39:12:90:9c:bc:74:a0:cc:05 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=bereanchristian.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:42:49:bf:5a:49:95:7a:2f:39:12:90:9c:bc:74:a0:cc:05
Serial Number (int): 371005807147461985356486384388904650329093
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 00:39:26:6f:3e:da:03:5b:d4:eb:80:f7:70:a1:9a:9b:ca:d5:b1:e3
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): c2:83:56:07:9d:9d:97:17:a0:88:3a:a6:73:8c:91:b3:98:eb:ff:1c
Fingerprint (sha256): 91:03:20:9f:8d:46:1d:41:55:23:13:39:ea:d5:e6:86:2c:92:8a:d1:f4:80:c8:4c:34:b0:14:09:f3:96:c9:59

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate bereanchristian.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bereanchristian.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bereanchristian.com

Other certificates including the domain name bereanchristian.com

(limited to 100 certificates)
www.cranburyschool.org
bereanchristian.com
bereanchristian.com
ashlandcityccs.net
www.healthystartacademy.com
admin.bereanchristian.com
admin.cheathamhighccs.net
debusk.greenek12.org
bereanchristian.com
www.bereanchristian.com
www.sttheresaschoolpalmsprings.org
nphs.bpusd.net
lacountycharterselpa.org
www.colegioangloamericanohgo.edu.mx
www.bereanchristian.com
admin.glenknoll.org
www.bereanchristian.com
msdurham.org
healthystartacademy.com
bereanchristian.com
admin.arcataschooldistrict.org
www.saltlakespa.org
bereanchristian.com
admin.arcataschooldistrict.org
bereanchristian.com
admin.arcataschooldistrict.org
bronxdalehs.org
bereanchristian.com
bereanchristian.com
www.bereanchristian.com
sh.iasd.cc
grandcenterartsacademy.org
admin.bbel.bbrook.org
bereanchristian.com
bereanchristian.com
www.bereanchristian.com
southbayadult.org
www.annaleeelementaryandsteammagnet.org
mhs.molineschools.org
www.bereanchristian.com
admin.sainte-school.org
bereanchristian.com
admin.bpusd.net
www.bereanchristian.com
admin.bereanchristian.com
admin.afsenyc.org

Certificate

The complete raw certificate details for bereanchristian.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 371005807147461985356486384388904650329093
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-05 02:22:33 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-03 02:22:32 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bereanchristian.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 714845975875644053612799382640989811403138585938034865703312724461715094264756167940743154277362431621136645069076114923926883528215788323997846345301072438617808763489857433097734639986985613491452558721095370570114871273024932888584835553139468713494584515937502795896092387816783794140135102690387552944442716918302705913957204795306474608530201114000439325470015850358233133805623760176726816044597170553216024634938878872096266725984207502332222402951156638509368646870453964598113359162150473533042499193128861103898945751973155051142332370258968969994585951037187361949116914934616844249966244664828190093116421238759934349424318201770512818059973836479424809152007392781565953303822478758110823374077712203268398514866330564503290990089297913629127528520388744213138901601704294143566377908084162857033328969423190001587005764724705405947445300229987391348041740483605483232310782374681295027095090540114239003638988546119674740622343381809144494780569553641519307232603709866776921557189505131963172619983843456487250304110436688650054946331582011072672375433578359421020444732751249413340052501836634502530288856923339688523697542433696201201272666030939959318081950331700905161127985797344355549555963279350105497222415177
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0039266f3eda035bd4eb80f770a19a9bcad5b1e3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bereanchristian.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018afddbc8920000040300483046022100a382bec40d7b096b9e2ca9f2a40fcb3704b96de712d88a530291011d952a81e0022100d10b55ff43f9e9526c4d71e0a6671873ba4df8bcd46b7c901fd3ad708812248c00760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018afddbc8b70000040300473045022100d31050a6cae04c96472faba847295b542209f6d2d9974bc62f2d021f4768c56602205b06fb764f02a944dc7add142e54c050a1868263b3f24f6a2f55f4a8ee22d23f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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