ukr.bible

Issued by R3

About this certificate

This digital certificate with serial number 03:99:60:ab:b0:10:91:0a:85:95:5c:98:d9:37:6b:3d:b0:d7 was issued on by Let's Encrypt.

With 12 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ukr.bible

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:99:60:ab:b0:10:91:0a:85:95:5c:98:d9:37:6b:3d:b0:d7
Serial Number (int): 313528557275559115118525752245113033961687
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d1:a1:24:dd:15:e4:d7:a2:9e:f8:c0:f8:48:69:eb:92:57:32:fb:65
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 42:7b:fd:05:1c:c0:fc:af:4d:19:1a:9c:bc:1a:cd:19:02:d3:17:3c
Fingerprint (sha256): 9d:0a:4f:4d:eb:ea:39:e9:c9:7f:81:3b:ec:42:f6:86:20:3f:d8:46:cf:43:e9:6a:53:90:59:e6:02:64:a3:1f

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate ukr.bible

12

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ukr.bible

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

altleftsupremacist.com
beachprides.com.timothyvdixon.org
healthfine.org
jrshomeimprovement.com.southhillsunited.com
learnaffiliatemarketingebooks.com
pay2.co.kaushalgoyal.com
sciforconservation.org
tackwell.com
thecakecase.com
ukr.bible
vsnls.com
yourstoreformore.com

Other certificates including the domain name ukr.bible

(limited to 100 certificates)
dumptruck.ca
enjoyrxsugar.com.healthyhomeuniversity.com.ukr.bible
sale.nano.bible
sale.nano.bible
sale.nano.bible
ukr.bible
lng.world
dumptruck.ca
5272653.ca
dumptruck.ca
ukr.bible
ukr.bible
5272653.ca
5272653.ca
1031.trade
ukr.bible
musicoldies.ca
dumptruck.ca
5272653.ca
musicoldies.ca
ukr.bible
pharmacy-xl.net.ukr.bible
ticketsdirect.ca
musicoldies.ca
wiwak.vc
ukr.bible
musicoldies.ca
dumptruck.ca
musicoldies.ca
ukr.bible
ukr.bible
advertise.world
indestructible.bible
ukr.bible
musicoldies.ca
pharma-apotheke.info.ukr.bible
musicoldies.ca
5272653.ca
hudson.bible
dumptruck.ca
ukr.bible
musicoldies.ca
ukr.bible
sale.nano.bible
mygrinder.ca
dumptruck.ca
musicoldies.ca

Certificate

The complete raw certificate details for ukr.bible in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Tky7Ja1URgxKFRvPhjG
B0Ujr7glXjkJn+FoiJ2AX4KoKgVK9uYeyiVPaBhJaFACptYeUvYzAegqoACIDwAi
lcH/0KYh7hz9rQi5eSJnQAw+E5OxnQ8vVmeT9ea0T0cY8beTKHjTUWyDB3f0Edq+
l5Eo6ziozzhmIhKhReybege5Sj1Ocq8w54o6zXWjJuNk/IxsiU8noDGbCtotdiiq
Zc3fU6c2OjU+tJdHWwAeFCpTQrfhf7x775UEQrJKV3qQdS8HkGkqXvzAuXogTmu2
qtZgKFj8lh3FeCUugY4GthR5Ivub6tdaRhuh7HReczrRAVU3y51TsASZwhpf26Tx
QwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 313528557275559115118525752245113033961687
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-06 17:09:56 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-05 17:09:55 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ukr.bible'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27421918017593694253138245071175944377179569313759795579879856339828960771848459672283979036160353663361621726967641213710569579383735061591788267103220377880184226268576042785176805523626088944792131103546203169336484498707590955691740166732087138334953363023080527996373719624832342861174380597204518263535498232547443673415342834795438638693070663742134560009785836786000177144748991408790766906258105919550407113912751019082370513516139822232476726967068813125749963157825740545101582441189554820184752217608627864901791519523877935737623845130825933641361254137034630451794303421433278724597565741041870734422339
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d1a124dd15e4d7a29ef8c0f84869eb925732fb65
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (284 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'altleftsupremacist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beachprides.com.timothyvdixon.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthfine.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jrshomeimprovement.com.southhillsunited.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'learnaffiliatemarketingebooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pay2.co.kaushalgoyal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sciforconservation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tackwell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thecakecase.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ukr.bible'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vsnls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yourstoreformore.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018a6bafc8e30000040300473045022100cdb4174f79c294ba2ab61c57504bac3f8f251a1ac72758c96b0fd273c641c3a302201e4a9213b8065d2b0c568e6707e550da67f7c85b3867529bec17c562a5418c94007700e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018a6bafc8c20000040300483046022100fa6e74ff820b7aafb265e9f7c8d6956f76e00ca88e90fd51b9e4cc4a5b3831360221008308fe7da592fb2bacc3cb1beb2f54dd7e27649987803ab4498ab2a318f9395b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		004161fd17c3511acbee42cb3d42bde7cb2b2258cae85d71f118a44ecd0c72e5781bda4c1eb81eb3ea27118bb392d35e14984795df53ee953b1e3ddea9b8008ca528d11e87ade5368928b22a19f96e8a5d6d232b67319ce72195d9fe996efc212e1ae8e7b4102f12d70e79e8bf6f71242ae9776b9dcd4ebfc96f23b0092ce0356bd04695fb65401213077c8ad3b22ad9793f55fc98fcef4a6443a6646785348e3251fda16c75c011b4942a45b06de03d0c7a2184030feffc461dab23d0dd64b271a2e2f199f57a2b9e5c5951e47964ff71083ecabef45c44ffa8be1ac89f65937f1c4926e519b69441b9ac7d2d0cbac574c8d93a74a4d38076b8305ff8f3ffba8c