bridgespublishing.house

Issued by R3

About this certificate

This digital certificate with serial number 04:be:db:82:f6:00:25:e9:ff:07:91:e4:b9:2e:66:51:b0:50 was issued on by Let's Encrypt.

With 15 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=bridgespublishing.house

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:be:db:82:f6:00:25:e9:ff:07:91:e4:b9:2e:66:51:b0:50
Serial Number (int): 413394574361172297076027793471369764778064
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: c5:9c:0e:38:ee:6d:2d:67:a4:e5:68:b3:22:6a:22:57:ed:3c:0d:82
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 47:b3:76:ed:d1:aa:27:a5:8f:56:45:9f:33:0b:86:62:17:80:e9:8e
Fingerprint (sha256): 98:09:92:59:30:3a:0b:7c:3f:67:ac:31:98:4f:0c:22:d7:9a:e6:78:ba:5d:e1:fc:21:16:bb:a5:e2:cc:3c:4d

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate bridgespublishing.house

15

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bridgespublishing.house

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

afilio.com
alluloseisglucosefree.com
bridgespublishing.house
carrentalspalmbeach.com
dirtrader.com
escuelasa.com
franksocial.org
freecovidvaccinelifeinsurance.com
lingying.sijie.li
originalgyro.com
pokerfrom.com
sue.jrmaschietto.com
tulop.com
vtdivorce.com
weegenrolloff.com

Other certificates including the domain name bridgespublishing.house

(limited to 100 certificates)
immigranthousing.net.bridgespublishing.house
diskjockeys.ca
bridgespublishing.house
bridgespublishing.house
bridgespublishing.house
bridgespublishing.house
bridgespublishing.house
bridgespublishing.house
bridgespublishing.house
bridgespublishing.house

Certificate

The complete raw certificate details for bridgespublishing.house in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ngT0Br/50Ggak4fvF5S
hOOLWuV5vLuHHjDT5B5S7LxsxUG7wnnvNGNWmK0YCCsGdd23czt8aNfdyONo0E9D
ASS/dIpDvBt67b8pcSY79q0HXiAp3spWQMIdh87YoAwS/MvI6uw60Wz3Wa0n5gAA
CmUohdUE+aHPwJ1E/PsX7U7YEyK6fn+1XwWYxSx8+8w006d3AGskVj38zREIXI4j
/B0Sz1NGIZ/iXC6gex2jM783p3qyIQYfIoj3xwIrW6Qzew8EzKdGClpdehpjp6yZ
29nXikyIZgJdrJanMuC2GBr+8lJS3tHRwbVA7NjXlIn6PQuJTjZ8HVLVj1esgucf
ywIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 413394574361172297076027793471369764778064
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-16 10:03:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-15 10:03:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bridgespublishing.house'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27579162852549850587360678154947610867769779299081537814764231035058640517935032835841628974038420874919502704751366076494863048878287054633179069580463278349126683100594975196785773283655819777566111054974290380606049039859963968061419859541870097695158961521280357555996557622830349960066918786828746898381047464942880859052903982902246743006328033225731111307401842261510257130014410437950477766095450307349320061572963386448138404274417165844651473212921925432336132532041738841654126739594604883914682998764397291528646525042794219201246110750796478057823719888332950494232581983744819082847920068338940857753547
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c59c0e38ee6d2d67a4e568b3226a2257ed3c0d82
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (294 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'afilio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alluloseisglucosefree.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bridgespublishing.house'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carrentalspalmbeach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dirtrader.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'escuelasa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'franksocial.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freecovidvaccinelifeinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lingying.sijie.li'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'originalgyro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pokerfrom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sue.jrmaschietto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tulop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vtdivorce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weegenrolloff.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018ee69341e90000040300473045022100915d8681aca3c9ec0532088fe3032d2b9c2771df6fed5d6ffedca00e20c8f2ad022000ecc06ca46457d91fd36041de6f22f031c5ce37188228b4ae677c5176a1d17f007600dfe156ebaa05afb59c0f86718da8c0324eae56d96ea7f5a56a01d1c13bbe525c0000018ee69342af0000040300473045022100f6130d6a5aeb77189f89ba273f285d2d42a8de2908587c698b1c752f98660cfd0220261921b5f4b08b6013949bcfeae68fef39e7d49fb80781e478967d301d6efbfa
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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