breadoflifenetwork.org

Issued by R3

About this certificate

This digital certificate with serial number 04:89:aa:c4:db:67:5c:a6:76:f6:79:a9:89:51:78:1c:9f:76 was issued on by Let's Encrypt.

With 30 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=breadoflifenetwork.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:89:aa:c4:db:67:5c:a6:76:f6:79:a9:89:51:78:1c:9f:76
Serial Number (int): 395294818894714142408647338507043157614454
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 5b:3a:4e:cb:7b:a9:31:1a:16:82:0c:e1:c7:56:e5:e8:27:b4:37:7f
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 33:89:ea:c5:6e:09:a8:b1:0b:f1:6f:c0:38:bb:43:b1:f7:5f:6f:eb
Fingerprint (sha256): 9e:ce:71:b3:21:c0:a1:07:30:49:3c:89:fe:f6:32:3a:6d:b8:d1:53:7a:5e:4e:98:0b:75:be:30:5f:36:89:7d

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate breadoflifenetwork.org

30

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for breadoflifenetwork.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

breadoflifenetwork.org
copr.me
findtheone.online
homeandaway.ca
lodge.ninja
lost-allhope.org
loveearth.ca
missionalmedia.org
retirementparties.ca
rossopomodoro.pizza
skrubber-game.org
smartsoftware.ca
stemlaunch.guide
trumansbeach.org
waawaa.org
www.breadoflifenetwork.org
www.copr.me
www.findtheone.online
www.homeandaway.ca
www.lodge.ninja
www.lost-allhope.org
www.loveearth.ca
www.missionalmedia.org
www.retirementparties.ca
www.rossopomodoro.pizza
www.skrubber-game.org
www.smartsoftware.ca
www.stemlaunch.guide
www.trumansbeach.org
www.waawaa.org

Other certificates including the domain name breadoflifenetwork.org

(limited to 100 certificates)
breadoflifenetwork.org
www.subordinating.ca

Certificate

The complete raw certificate details for breadoflifenetwork.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8Q6eJRPGbWayw8+Nno9+
CqnaP5XPx5e6iYUWXq520KFEE5qK2HFIQZKHw9p8oP02aKJsk8f21cEk+ycn/3O5
27i2CQ9ZaGlFeNt16SAmciex/1eOAgBP5CR8zLM7Tzyo5/c21ccn7uWMYrTdnAcQ
P33JPEmNdFn9sUVsQxtkQy1woEM0Wo0Ryh67aqfH0HMO7EkVm5tR9IAu+YoWwYTj
TpebPpls+Poshqwkognk8a0gTzHz1bYAPBcBhTU33qoaSMBPL4Ft5rcdsQtUxFCx
yBGfpuWnlqriZ+6SzQ/jLmZQHtR+Qud/YadqRELh8XF6Z486d1+ZoHdjaBdIa7BS
SQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 395294818894714142408647338507043157614454
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-07 14:42:44 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-05 14:42:43 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'breadoflifenetwork.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30430639779605996501326930578152226928830742161374796919749007405271377278569094995903508129382644701482100456232890978132126881882761512398574666429748752247957524990479009878132917059950564389650396016639121238566610569073436379193585859328776148640366393346996844450754949771011455204150132437603531699335423502343500468906411670320008448332293827817400397031322840960954370807866440416974927052560068743044025375050629942636002428076876692831957210659236934089307939556584666719939124598575128122671297150757894214533867193851531757287348539161121681931202255469401048360021111966650185846061384366602908177814089
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5b3a4ecb7ba9311a16820ce1c756e5e827b4377f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (586 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'breadoflifenetwork.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'copr.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'findtheone.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homeandaway.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lodge.ninja'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lost-allhope.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loveearth.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'missionalmedia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retirementparties.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rossopomodoro.pizza'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skrubber-game.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smartsoftware.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stemlaunch.guide'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trumansbeach.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waawaa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.breadoflifenetwork.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.copr.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.findtheone.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.homeandaway.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lodge.ninja'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lost-allhope.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.loveearth.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.missionalmedia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.retirementparties.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rossopomodoro.pizza'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.skrubber-game.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.smartsoftware.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stemlaunch.guide'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trumansbeach.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waawaa.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca0000018f53b8b3080000040300473045022002b2292743ca9aacf10dd20aadf1e282fc7551388c4a19b4f8ca21e0632a32d5022100bc40babf5137329c8b0ae551bc7b7937c558ce22bc266e218544714a119fa2c200750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018f53b8b33a0000040300463044022008d8c7b8a8c915e398eba82c98e82a4f2dfdc1f67b0a946031bcebdf3d761721022056402b094d129f00abf91cc81d43ff1a4562918502f57a7c28715434b2a78582
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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