www.bibleresearchinstitute.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:75:f5:f3:7e:93:c5:81:40:91:3d:14:e0:2a:45:60:b5:9a was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.bibleresearchinstitute.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:75:f5:f3:7e:93:c5:81:40:91:3d:14:e0:2a:45:60:b5:9aSerial Number (int): 301476819879425743270045193710351677437338
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 9e:4f:bf:19:18:04:89:90:23:03:fc:22:9d:aa:92:1c:ec:23:67:53
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): e2:d6:31:7d:98:f3:c1:e4:62:cd:9b:e3:6f:81:80:5e:72:c5:84:b3
Fingerprint (sha256): a5:db:93:c7:d7:7b:68:e0:65:1b:fe:2f:e2:09:2e:be:86:14:ae:be:2c:7a:25:6b:85:6f:71:ea:85:30:85:37
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate www.bibleresearchinstitute.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.bibleresearchinstitute.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.bibleresearchinstitute.com
Other certificates including the domain name bibleresearchinstitute.com
(limited to 100 certificates)
www.includeme.com
www.bibleresearchinstitute.com
www.bibleresearchinstitute.com
bibleresearchinstitute.com
www.bibleresearchinstitute.com
bibleresearchinstitute.com
www.bibleresearchinstitute.com
bibleresearchinstitute.com
bibleresearchinstitute.com
bibleresearchinstitute.com
bibleresearchinstitute.com
www.bibleresearchinstitute.com
www.bibleresearchinstitute.com
bibleresearchinstitute.com
www.bibleresearchinstitute.com
bibleresearchinstitute.com
www.bibleresearchinstitute.com
bibleresearchinstitute.com
bibleresearchinstitute.com
bibleresearchinstitute.com
bibleresearchinstitute.com
Certificate
The complete raw certificate details for www.bibleresearchinstitute.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGdDCCBVygAwIBAgISA3X1836TxYFAkT0U4CpFYLWaMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA5MjgxMjIxMDFaFw0x OTEyMjcxMjIxMDFaMCkxJzAlBgNVBAMTHnd3dy5iaWJsZXJlc2VhcmNoaW5zdGl0 dXRlLmNvbTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAJDNoflXE7Q9 +0G0xzQsictmSolkRtVe3ZtS6lEDYdls5Tded/KC2ldIGuOunIybLzf304e4yS2X tkFpSTHHDeg2z5LTWdtM+wGqIDvlZyemhOx7ju7LMXiZhW1WcPT7OqLGMbDXPILX av+F3lXKFah/GNlp9Q5ynZ2lwE6Y1wI1eD0WBLp+tBBWaFrVSmTd/Pk7s3Kae5kH e2rH++/M//21OkubOoeiOE8/WG5hkoPMdqMjL1g5LYMOu5FgPf5jtQxUoWqnR7+z 28EIA7a0EwskSETn+b/sGxhJThQgL1WCjDLF1wzKZkE2wool2KTx//Q+/EFsEOr7 nCamjoIStyb/Ydh3G9saIaCgMpj5aD7ZO3ECw+EK5GoUoFmQinrh69PbOGaUrL0Q rVV0nS4Wvr/52eVy2ZY1m92jfPYCoiIHc7czRcvDULv8bd1OybPXlxuLIvNm8SJj 4lELfeyM2/c7BcX5OuZSUlVSIClZQpCVf3kPq3re4dkIfwfcExvZsPSI0FFri5Bi HmIhypALkCijjdHXYbFlzmBydaP7vgmtarFfcynHtl6r7NIYCAWZs93ZTdY6b9m5 BxLCBA4oy7KOe207+VX2s8KiKD7R8+Aw9sLuTGKkN7uW2VUAhyx0YhL69N9nabS3 /hWDuOD5KGNvz/EppHElfGPlAjHzpVKFAgMBAAGjggJzMIICbzAOBgNVHQ8BAf8E BAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQC MAAwHQYDVR0OBBYEFJ5PvxkYBImQIwP8Ip2qkhzsI2dTMB8GA1UdIwQYMBaAFKhK amMEfd265tE5t6ZFZe/zqOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYi aHR0cDovL29jc3AuaW50LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYj aHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNyeXB0Lm9yZy8wKQYDVR0RBCIwIIIe d3d3LmJpYmxlcmVzZWFyY2hpbnN0aXR1dGUuY29tMEwGA1UdIARFMEMwCAYGZ4EM AQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0 c2VuY3J5cHQub3JnMIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDwAHUA4mlLribo6UAJ 6IYbtjuD1D7n/nSI+6SPKJMBnd3x2/4AAAFteAgetAAABAMARjBEAiB23tLjjeEl xZaZ3GZ/8klfwMnntxPFZjKel+kMfOOOsAIgMBIDq9soivI//sH0CT1WgzRQqNkU FjJ9MRDUuscDxkYAdwApPFGWVMg5ZbqqUPxYB9S3b79Yeily3KTDDPTlRUf0eAAA AW14CCB0AAAEAwBIMEYCIQDJALXRE8UR48cWS6LlXT68IEyI1iLaP5pRgDZZ4lJX rwIhAPW/GkK1mIubwbrrkXukrpCrY3CTrqrPjroylYUT+fKTMA0GCSqGSIb3DQEB CwUAA4IBAQBe3UFAnCRjv/7DMl7wSKKMdlky62WjiC/u4ZvQ8exhxXM7MvEWzp9s jWqwuwW7Rlj0YH/an9vg4cQsl+Zuhy7pu8WbAodfozPKRK7SLSKUdc5WI0DXkyAI uXNlIMozeMOy3YTjsXvArAaqDz8ALz04X+os/or2KQtMGpglJWEfsKc2NPU0eCwg 4u4bQdo4+YD5pHWIV0HzUmFE2xm4mcNrqOiTCYr1OD1l1p3lTvIBurCHI+V5GHC9 TgXkdU7NFjkI4m+PZKYQqzLNSIH18JYc8/+JpO1a4L+n8pUO2Oii714V8e4kCTs0 p4QjrRCtZktca6DbyhMCsMS8mkpPLG89 -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAkM2h+VcTtD37QbTHNCyJ y2ZKiWRG1V7dm1LqUQNh2WzlN1538oLaV0ga466cjJsvN/fTh7jJLZe2QWlJMccN 6DbPktNZ20z7AaogO+VnJ6aE7HuO7ssxeJmFbVZw9Ps6osYxsNc8gtdq/4XeVcoV qH8Y2Wn1DnKdnaXATpjXAjV4PRYEun60EFZoWtVKZN38+Tuzcpp7mQd7asf778z/ /bU6S5s6h6I4Tz9YbmGSg8x2oyMvWDktgw67kWA9/mO1DFShaqdHv7PbwQgDtrQT CyRIROf5v+wbGElOFCAvVYKMMsXXDMpmQTbCiiXYpPH/9D78QWwQ6vucJqaOghK3 Jv9h2Hcb2xohoKAymPloPtk7cQLD4QrkahSgWZCKeuHr09s4ZpSsvRCtVXSdLha+ v/nZ5XLZljWb3aN89gKiIgdztzNFy8NQu/xt3U7Js9eXG4si82bxImPiUQt97Izb 9zsFxfk65lJSVVIgKVlCkJV/eQ+ret7h2Qh/B9wTG9mw9IjQUWuLkGIeYiHKkAuQ KKON0ddhsWXOYHJ1o/u+Ca1qsV9zKce2Xqvs0hgIBZmz3dlN1jpv2bkHEsIEDijL so57bTv5VfazwqIoPtHz4DD2wu5MYqQ3u5bZVQCHLHRiEvr032dptLf+FYO44Pko Y2/P8SmkcSV8Y+UCMfOlUoUCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 301476819879425743270045193710351677437338 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-28 12:21:01 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-27 12:21:01 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.bibleresearchinstitute.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 590745731221175852382944823092229165021486013820432560172646847398855511122201410250725599740749094117887860448452753369739083820589460010197826089672627174720280753559719185323728886974679202807843439140400597082495745435026803681427473432494727593053391000611580974931039688998374780340990533330649076810754799602946995922071399358121091040900703678405904635902748606989602853307714682149645586267635731053549998951574349279354026608883236439221721791619029176400233831931011426932717166592003490642073195528468166977050390747792415226453913183725398103746042427391414349861887933094622431060778334429757869613762145481801610664026325502546407727052880225770533233248232248194516302991518118636785376712420230632784574293904228910698022570880057341151183294649808352734663395226935327673679290494991721347295523733312261962633909272343482651721168527292509775775845028188672829974731309116551903556017067352673299385760095140668722301860283451965698625662075271211698583415077620726795434954142330809037033983996006049824271331740121826603493350828896001059332467491467514972869145043832590852211835880648898042698929664064819323927572886849359809855406023763635253355962543361171142093009981603580009752641309877880071002245124741 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 9e4fbf19180489902303fc229daa921cec236753 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bibleresearchinstitute.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016d78081eb40000040300463044022076ded2e38de125c59699dc667ff2495fc0c9e7b713c566329e97e90c7ce38eb00220301203abdb288af23ffec1f4093d56833450a8d91416327d3110d4bac703c646007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016d780820740000040300483046022100c900b5d113c511e3c7164ba2e55d3ebc204c88d622da3f9a51803659e25257af022100f5bf1a42b5988b9bc1baeb917ba4ae90ab637093aeaacf8eba32958513f9f293 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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