churchflare.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:76:92:0c:37:f0:25:00:87:ea:a7:5b:cb:34:0a:80:f2:fc was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=churchflare.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:76:92:0c:37:f0:25:00:87:ea:a7:5b:cb:34:0a:80:f2:fc
Serial Number (int): 301684307821457117555402177244897430532860
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b2:fb:46:44:01:f2:22:36:05:fd:78:4e:88:a5:79:40:d1:6c:36:e4
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): b0:6b:bd:7b:e0:00:1c:32:3a:a7:4d:ca:58:1c:af:4a:c1:83:aa:30
Fingerprint (sha256): a9:25:35:07:65:35:ef:ef:1f:da:3e:18:dc:a1:04:ec:12:06:ee:e6:c9:20:9a:3e:86:a3:18:0c:bb:f6:32:0f

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate churchflare.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for churchflare.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

churchflare.com
www.churchflare.com

Other certificates including the domain name churchflare.com

(limited to 100 certificates)
www.ridermaps.com
onedollar.pizza
churchflare.com
churchflare.com
sme-onboarding.vaultigo.co.uk
churchflare.com
help.churchflare.com
www.palmeirabeach.pt
admin.churchflare.com
app.inspectortoolbelt.com
blog.jamesonsaunders.com
support.kifutown.com
www.convercauca.com
lettleie.no
hazrif.beecomm.co.il
churchflare.com
www.cafsoft.com
churchflare.com
help.churchflare.com
sni.cloudflaressl.com
churchflare.com
www.thetutorology.com
hazrif.beecomm.co.il
churchflare.com
thehappyarc.com
www.acedayly.com
churchflare.com
churchflare.com
www.milk.horse
team.tackmate.xyz
culver.ch
www.khadimfall.com
churchflare.com
webapp.go2s.com
resource-staging.trackplanfm.com
churchflare.com
churchflare.com
www.cosseno.com.br
stats.klikk.no
admin.churchflare.com
sni.cloudflaressl.com
www.victorjouin.com
scenesound.app
app.canoeinfo.com
team.tackmate.xyz
marciarangeldoces.com.br
churchflare.com
wedding.mutanti.com
churchflare.com
sni.cloudflaressl.com
evsquare.androidhuman.com
churchflare.com
churchflare.com
sni.cloudflaressl.com
eforms.elmlab.my
churchflare.com
pdin.org

Certificate

The complete raw certificate details for churchflare.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+1DMqCwhDdYHIGIGket
ltxA2KJk7yE2y/SoWkJOM0WoN6VLTvQx9NhJUEmTr17NA/+uF0oeId99P0j+EnL+
a97vNfG6VOBqU6/KWB5wK+SQQ4ipcXLzd2H8U3K5TZXukqeA8rTOqqITu7SKj8kZ
fFKoX4YARQPY+aoOSHjcaugJr8I/+mb4Y5yuXQZsO6IwxlNsUd/Onc3ADUbc1v52
tczFbF8cjcl2GsQXs/RBnE81xTjj0SOEymL/YY1pcH5A3M+iWef8enPWsYB+mfLF
1wO5cM6zVLgydJeGTwGB8mVm35j2H7AnpgyWmiMR4b+kfJagIavPFpAWwYFNSr8m
+wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 301684307821457117555402177244897430532860
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-12 17:34:49 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-10 17:34:49 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'churchflare.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26248327623011664391981693862602897666060793918678414645502978995023766834698277152375228323865789198499762923685912091149676234069565548382277027663613667707383546263040740906956902745010463760929402245399916586204863606982673212907441489969444459812602240887322567756679187668144091611643864517599040434257927483912560249843227215809750750232726642883181035755966775172320316049157011449322784650786581013156015473702069928527975705903428835453195079938236787987323595746556021884672696309811662942636483256534503315875603840053196233232334684014954513983685422999565306981766975350561212681524217879099665939375867
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b2fb464401f2223605fd784e88a57940d16c36e4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'churchflare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.churchflare.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016709346e18000004030046304402200af99ae0717ae9d9f331bb22a50a0cb0099c693061f887cd5f3a7167396e3d7402204da3e98f9b3ec7e1b209466273db3e3020be0fad95a163074dbf613f6f5a5bf80076005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c0000016709346fa200000403004730450221008bb5de2dc15d21ba189e5568afa8bd5a7a43f1c50a7542ce345087622dd2acf3022020f7bfb69c27d8b81e97632568ae163d3a05bc0d774d79984b849dc9c743c857
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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