proofread.bible

Issued by R3

About this certificate

This digital certificate with serial number 03:a7:68:3b:45:10:b8:6b:60:52:61:db:b2:e8:0e:3f:bd:0f was issued on by Let's Encrypt.

With 26 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=proofread.bible

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a7:68:3b:45:10:b8:6b:60:52:61:db:b2:e8:0e:3f:bd:0f
Serial Number (int): 318302560528964736447797518889961396354319
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: f7:8b:d8:c3:07:c7:ac:9d:91:91:72:32:58:ea:df:13:b7:3e:9e:60
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): d4:74:46:99:be:e2:3b:4a:5b:d5:1e:ef:b5:95:97:70:7c:f0:ae:d7
Fingerprint (sha256): ac:e5:be:a4:5d:e6:21:3f:49:d7:5f:08:04:39:67:5d:65:b3:47:e1:a5:0f:d3:43:35:06:4d:77:30:ae:9e:dc

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate proofread.bible

26

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for proofread.bible

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bikanersweets.in
bizbanners.com
cammeron.com
chilleraustin.com
creampiemilf.com
duilaw.co
dumpstersmichigan.com
fojnica.com
horoscopehoodie.com
lgbtqtravel.app
logistician.com
newhomesinsanantoniotx.com
onbenefit.com
onenation.in
onlinedirectory.in
ossineke.com
peoplebee.com
perfectvastu.in
performancecapturestudio.com
proofread.bible
rc-cars.com
stlouisschooldistrict.com
urbanfaithblogs.com
wineengine.com
www.realhealthysyrup.com
zacharyjrubin.com

Other certificates including the domain name proofread.bible

(limited to 100 certificates)
proofread.bible
ms.cosfacts.org.proofread.bible
tuna.vc
photo-studio.co.za
proofread.bible
proofread.bible
proofread.bible
twee.co.za
proofread.bible
proofread.bible
hasyapi.com.proofread.bible
proofread.bible
erin-gee.media

Certificate

The complete raw certificate details for proofread.bible in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzcvwh+hcl5pF5JZN1MiG
w2xHm09ewqw6XfZfaiXqdUxGx6JI945d5xWWpaBkceClTXHFCeXt7xX7Eto7vjkh
1yE7dOyH8IEL1qo7QkBCy4D0LKQth/8Pntb6jgUmIn1DRnmVdQlQhOMQcvEZPIGO
smUqjaqCqX8jPj5YK9c6NKUT0sr0T+vEcUV8BK1BV3TwtorFufYLveDsTc7ws7wK
KyPF8P/92BtseZ42ZQrlnPRcmPRTmoOlYNHxd214VeD0JhBWkrYQuLW4D+2GlpGK
qhFiy7OY9X/em2DI0KspTHzBw68fwXp4VuoOAGeCYjFzhnD8z36ciJsjQh5MC2+y
EQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 318302560528964736447797518889961396354319
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-01 06:23:06 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-30 06:23:05 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'proofread.bible'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25979418870035339609465807937409579705457008776692316092491229067365131451751193444084177645670418753081543321870538943001728385519656790923456322123387309458861225653269119326825283074477938569523587515255824317553290290624815990675453476566503547777196103587971529524171627227785850106426700224034827007350975933830018998740702861552493247998073548508745130289723484763053580539375605598705609305812353940254656827264301608832974275516338959867986430994012056244259032439460582063993046590628664961268757853223454409559862169319989729636252692000229013755830578720502392244915850835163258976749151974003112410067473
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f78bd8c307c7ac9d9191723258eadf13b73e9e60
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (483 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bikanersweets.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bizbanners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cammeron.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chilleraustin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'creampiemilf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'duilaw.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dumpstersmichigan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fojnica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'horoscopehoodie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lgbtqtravel.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'logistician.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newhomesinsanantoniotx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onbenefit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onenation.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onlinedirectory.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ossineke.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peoplebee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perfectvastu.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'performancecapturestudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'proofread.bible'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rc-cars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stlouisschooldistrict.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'urbanfaithblogs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wineengine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.realhealthysyrup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zacharyjrubin.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018df8e52fc9000004030046304402206850f8b34a2cb8411f9477c54d4e6015e1321fc81a5cfa5eb96b77fe3eaab90d0220481772b982e48c05fbcf049af9ad7143580c3beff48dbe32919c0c3c7ae727160076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018df8e531c4000004030047304502206c571233c80db01ff2da699f2aa51bd851c93c6147535c230a569c4751d56681022100b66a00570acd76aea448218364bf517c0ec648521f1a33152ee1c453b797e5ae
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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