nationalchristianhomeschoolleaders.org

Issued by R3

About this certificate

This digital certificate with serial number 03:c8:94:65:cf:6f:7b:0e:4d:8d:66:fd:1d:33:6f:39:e0:90 was issued on by Let's Encrypt.

With 13 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=nationalchristianhomeschoolleaders.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:c8:94:65:cf:6f:7b:0e:4d:8d:66:fd:1d:33:6f:39:e0:90
Serial Number (int): 329590585552118510141706115512451810844816
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 42:6e:d0:1b:d1:2d:a9:80:7c:17:7c:ac:1b:fc:04:f9:d8:5e:ea:21
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 39:69:a8:11:cc:ee:da:1f:68:b8:3e:e3:a8:bd:13:8f:81:57:d7:9a
Fingerprint (sha256): 9a:d8:48:27:ac:05:ec:2b:1f:e0:e1:09:da:52:c5:a7:ed:61:c8:b8:9e:22:e8:92:e7:0c:5f:b7:8b:db:45:77

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate nationalchristianhomeschoolleaders.org

13

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for nationalchristianhomeschoolleaders.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bigsexi.com
caringchurchnetwork.com
certifiedsugar.com
dfwprestige.com
harleystreetbreastreduction.com
maineantiquestore.com
mirthmaven.com
nationalchristianhomeschoolleaders.org
pet4vip.com
plateco.net
premiumdomainsmall.com
treasurelesson.com
vaunage.com

Other certificates including the domain name nationalchristianhomeschoolleaders.org

(limited to 100 certificates)
vedderhouse.ca
revolutionary.one
btv.media
ilfpc.org
zinnia.fund
nationalchristianhomeschoolleaders.org
jenksamericatoastmasters.club
nationalchristianhomeschoolleaders.org
potstocktrade.com.nationalchristianhomeschoolleaders.org
meanshub.org
nationalchristianhomeschoolleaders.org
gctc.org

Certificate

The complete raw certificate details for nationalchristianhomeschoolleaders.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGBDCCBOygAwIBAgISA8iUZc9vew5NjWb9HTNvOeCQMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDA0MjcxMDQ1MTlaFw0yNDA3MjYxMDQ1MThaMDExLzAtBgNVBAMT
Jm5hdGlvbmFsY2hyaXN0aWFuaG9tZXNjaG9vbGxlYWRlcnMub3JnMIIBIjANBgkq
hkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwl9DTAW3zsB6BXDrv3RlUn3N+ZmvEzEF
ih/TpWqIPrFyl7e8jsJDmWmgbC4XS2+Txk0+1XMYeokRCeQimkxW3gnXwEOP9QlW
iw2mY8XtNZEVEwK83xZopqAF1MFcmo7gaDEdGPwi0TUrixb7oXBOYLiRTAXlayqR
9uSsNUI2jRObljXQDIAvRMGLVpN22UBJqwFihbUNOQsbHJm8TPvucFgcPVHCYGOT
06OFhMRmGUqg29rjgOQUqvl7DIdJs/nsrPbr+9FqHzDYAzYoGj+CXakbsS8cFnBm
ryWdDTFpb5yArfL5kfS35m/7gJlmXesRi+WDMlUBBtwNGRFBqUAHkQIDAQABo4ID
EzCCAw8wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEF
BQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBRCbtAb0S2pgHwXfKwb/AT52F7q
ITAfBgNVHSMEGDAWgBQULrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJ
MEcwIQYIKwYBBQUHMAGGFWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcw
AoYWaHR0cDovL3IzLmkubGVuY3Iub3JnLzCCARsGA1UdEQSCARIwggEOggtiaWdz
ZXhpLmNvbYIXY2FyaW5nY2h1cmNobmV0d29yay5jb22CEmNlcnRpZmllZHN1Z2Fy
LmNvbYIPZGZ3cHJlc3RpZ2UuY29tgh9oYXJsZXlzdHJlZXRicmVhc3RyZWR1Y3Rp
b24uY29tghVtYWluZWFudGlxdWVzdG9yZS5jb22CDm1pcnRobWF2ZW4uY29tgiZu
YXRpb25hbGNocmlzdGlhbmhvbWVzY2hvb2xsZWFkZXJzLm9yZ4ILcGV0NHZpcC5j
b22CC3BsYXRlY28ubmV0ghZwcmVtaXVtZG9tYWluc21hbGwuY29tghJ0cmVhc3Vy
ZWxlc3Nvbi5jb22CC3ZhdW5hZ2UuY29tMBMGA1UdIAQMMAowCAYGZ4EMAQIBMIIB
AwYKKwYBBAHWeQIEAgSB9ASB8QDvAHUAGZgQcQnw1lIuMIDSnj9ku4NuKMz5D1KO
7t/OSj8WtMoAAAGPH1+9CgAABAMARjBEAiAjKp7uMu5jCtdB3W9BUNTiuFxV/Hde
ecQUS/WBHd5S6wIgdHvagrq1SzZJDtDtSpH2GBP4E2tXhxAfXI0yY6dSr8kAdgBI
sONr2qZHNA/lagL6nTDrHFIBy1bdLIHZu7+rOdiEcwAAAY8fX74nAAAEAwBHMEUC
IQCJiT1jYi0P+JTZx4/LzH1v6ukyI4ziy2oLu6JGhU+uXwIgCoipwiLKF8Dnt6t/
Uxa3Y8DRqUEUPKmnpn6dD0xcneAwDQYJKoZIhvcNAQELBQADggEBAAlMIUuNgr87
Cj4VWx7nfkQrobCcoMqj9951boaxrZQOo0CE6aFjLY2KtXsq5CmQ79aizEYEASOk
HP6W30mfYbat/yx0o1diqyuskoE3ME52LaDnHr0MlIVnxEejSbuqs8IU1dbte9p9
KjHpqLGWO8ia7d8uHxcy32loZe1xj7a465Hlx60nsQoh2rh24t4xkCmomaHaBHmn
1zY02dpgpvRrZ81FPor1UmBrmofHUxRiyXT/37ZUF7ySKq5mTP6OILXFIX5zRz17
+EGQfRpbG18nY35Q4/147JFQC4Yals1Jfxb/XeGkPyyPZytxIjUosk9hCGTg44Wx
xDN4p6WF3pk=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwl9DTAW3zsB6BXDrv3Rl
Un3N+ZmvEzEFih/TpWqIPrFyl7e8jsJDmWmgbC4XS2+Txk0+1XMYeokRCeQimkxW
3gnXwEOP9QlWiw2mY8XtNZEVEwK83xZopqAF1MFcmo7gaDEdGPwi0TUrixb7oXBO
YLiRTAXlayqR9uSsNUI2jRObljXQDIAvRMGLVpN22UBJqwFihbUNOQsbHJm8TPvu
cFgcPVHCYGOT06OFhMRmGUqg29rjgOQUqvl7DIdJs/nsrPbr+9FqHzDYAzYoGj+C
XakbsS8cFnBmryWdDTFpb5yArfL5kfS35m/7gJlmXesRi+WDMlUBBtwNGRFBqUAH
kQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 329590585552118510141706115512451810844816
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-27 10:45:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-26 10:45:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nationalchristianhomeschoolleaders.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24537207039746218619770840575332178284033635883932563255863089144687875431380741209977847603965336007972242520438788781349275892687762585943542854003161522452689712239574877845383867186649773496451667843065176933103633761995076835438424671876433208192646729588466514735660336940610240045821777010748301233644172834078880382102797432824476255255671765835423133060772628318911031266777044312629093697174743294681604580117743111766050693382935888447070013597942968452745796586340436313207132935236646589198868979518189729246230764594967248749665210599732770346040477622445818462124981515853052296541353311557932007032721
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							426ed01bd12da9807c177cac1bfc04f9d85eea21
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (274 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bigsexi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caringchurchnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'certifiedsugar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dfwprestige.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harleystreetbreastreduction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maineantiquestore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mirthmaven.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nationalchristianhomeschoolleaders.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pet4vip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plateco.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'premiumdomainsmall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'treasurelesson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vaunage.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca0000018f1f5fbd0a00000403004630440220232a9eee32ee630ad741dd6f4150d4e2b85c55fc775e79c4144bf5811dde52eb0220747bda82bab54b36490ed0ed4a91f61813f8136b5787101f5c8d3263a752afc900760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018f1f5fbe27000004030047304502210089893d63622d0ff894d9c78fcbcc7d6feae932238ce2cb6a0bbba246854fae5f02200a88a9c222ca17c0e7b7ab7f5316b763c0d1a941143ca9a7a67e9d0f4c5c9de0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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