prezbiterianie.org

Issued by R11

About this certificate

This digital certificate with serial number 04:9e:e8:86:aa:59:55:6d:71:85:cc:77:16:76:8f:18:32:72 was issued on by Let's Encrypt.

With 26 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=prezbiterianie.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:9e:e8:86:aa:59:55:6d:71:85:cc:77:16:76:8f:18:32:72
Serial Number (int): 402522837818437785582522905546600669000306
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: e3:f6:8a:6f:98:dd:6d:ec:41:5d:7a:34:57:1b:8d:52:20:93:ab:89
AuthorityKeyId: c5:cf:46:a4:ea:f4:c3:c0:7a:6c:95:c4:2d:b0:5e:92:2f:26:e3:b9

Fingerprint (sha1): 4b:96:38:f5:23:e6:18:be:ce:c0:92:43:7f:e1:c0:01:79:35:4f:2c
Fingerprint (sha256): 98:6d:4e:c6:13:27:84:fa:51:df:0d:92:78:c2:59:e2:dc:7d:5c:f0:a0:71:b6:34:1b:6f:66:7e:26:6c:b3:00

Issuing Certificate URL: http://r11.i.lencr.org/

Revocation information

OCSP Server: http://r11.o.lencr.org

Check the revocation status for certificate prezbiterianie.org

26

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for prezbiterianie.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

basedpolitics.com
cafebooks.com
choresla.com
christianschoolsearch.com
cohealthfreedom.org
ctpublic.statenationals.us
customwallplaques.com
dko.co.in
floriantma.com
hofuf.org
homeschoolar.com
internationalwildlifemuseum.info
kaushalgoyal.com
lawyersbyzipcode.com
mysoredentist.in
neetic.com
paducah.net
prezbiterianie.org
resortrealtor.com
sillabuss.co
sslnft.com
suterclub.com
taleinc.com
tbpools.com
wokedoj.com
www.cyberpatentattorney.com

Other certificates including the domain name prezbiterianie.org

(limited to 100 certificates)
prezbiterianie.org
prezbiterianie.org
ssl-a1x9a.epik.to

Certificate

The complete raw certificate details for prezbiterianie.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6b9YkFqJ6SNQ+ClfdOvA
EFIy5bS5JkZZ4y/OP2qonCnxQQkiq2WIZkPJq4CifOKWnc6ScY40cIesWR6KyaT2
3QPwqOI1XzDx9MIbMH8SUlAD1LDW3pLPf+MFMGFnd9YcBoiVt3CCVMR5TUSaCVaS
4hp1cbBIgdKzEY3I4WgGXwPUBdp86nHqEX76N9Cvc0Axj7o/xEwhqJ8NKWUkrmvS
gzxr075hpxcmhno/2CdRNx65EVROicwWsn6g8wPfnwKRPNCCh/ZJhIPuaa+eoByQ
/bHp1WecrFUEPUqW80etuDXRxkWTpXc+B11OucqIuHmNYi2jH8JkIE3DOGfv1Auu
0QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 402522837818437785582522905546600669000306
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R11'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-08 00:19:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-06 00:19:22 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'prezbiterianie.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29507881263053322543854293624297294251511592484608979988157316851345846176058102689017504031855798194100847394509329454941226137995514629655646487458974968227449525998007470022830535035981791271005161833685925809016906666574315788276858398897251321804247572211329413054780541399241629245345870921414399904070537209342068584693207521743671391070610387677573794237791383088909100545999723353599020132068753951369181177997927887260966393315796796831516068415489601555590518023403762174756916341908617411254473958141694746869140336031405385495802134599873190793926861434449876032135262386664349759615997449581304396623569
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e3f68a6f98dd6dec415d7a34571b8d522093ab89
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c5cf46a4eaf4c3c07a6c95c42db05e922f26e3b9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (472 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'basedpolitics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cafebooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'choresla.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'christianschoolsearch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cohealthfreedom.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ctpublic.statenationals.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customwallplaques.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dko.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'floriantma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hofuf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homeschoolar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'internationalwildlifemuseum.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kaushalgoyal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lawyersbyzipcode.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mysoredentist.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neetic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paducah.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prezbiterianie.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resortrealtor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sillabuss.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sslnft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suterclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taleinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tbpools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wokedoj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cyberpatentattorney.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018ff56dc820000004030046304402206a7d0600cee9bac75ae2e8989ba3bb3afe7b9d86d8a98a041e22f6abd8c36cc9022012a5c64d10c42958e28e9c1c7d621d4312e9797da2c0fcefb90287dbc6f2558a0076001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca0000018ff56dc8400000040300473045022100bf4af7769479c84c108a83a41f4feb2902a8a5e22fdd08d2d0825e34b502772202200e34e7e665febb263630fbb8caff6c30496678ce8d06606f853e1060652d2ea6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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