bereanchristian.com

Issued by R3

About this certificate

This digital certificate with serial number 04:62:33:f7:7b:06:18:24:20:b2:5e:e0:63:05:f5:6e:21:f5 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=bereanchristian.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:62:33:f7:7b:06:18:24:20:b2:5e:e0:63:05:f5:6e:21:f5
Serial Number (int): 381865891305621266358061001780544943301109
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 75:20:2f:41:74:8e:8a:03:f7:e7:cd:8f:54:6c:f6:54:3f:1f:96:98
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 41:48:e9:6e:b6:ec:82:86:b6:12:af:bc:58:78:e0:bc:38:94:47:67
Fingerprint (sha256): b0:2f:be:fb:4f:69:e0:c5:87:f8:60:5b:e9:e3:d6:d2:43:b9:d9:1b:0f:09:f4:06:cc:e0:09:bc:10:f3:d8:9e

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate bereanchristian.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bereanchristian.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bereanchristian.com

Other certificates including the domain name bereanchristian.com

(limited to 100 certificates)
www.cranburyschool.org
bereanchristian.com
bereanchristian.com
ashlandcityccs.net
www.healthystartacademy.com
admin.bereanchristian.com
admin.cheathamhighccs.net
debusk.greenek12.org
bereanchristian.com
www.bereanchristian.com
www.sttheresaschoolpalmsprings.org
nphs.bpusd.net
lacountycharterselpa.org
www.colegioangloamericanohgo.edu.mx
www.bereanchristian.com
admin.glenknoll.org
www.bereanchristian.com
msdurham.org
healthystartacademy.com
bereanchristian.com
admin.arcataschooldistrict.org
www.saltlakespa.org
bereanchristian.com
admin.arcataschooldistrict.org
bereanchristian.com
admin.arcataschooldistrict.org
bronxdalehs.org
bereanchristian.com
bereanchristian.com
www.bereanchristian.com
sh.iasd.cc
grandcenterartsacademy.org
admin.bbel.bbrook.org
bereanchristian.com
bereanchristian.com
www.bereanchristian.com
southbayadult.org
www.annaleeelementaryandsteammagnet.org
mhs.molineschools.org
www.bereanchristian.com
admin.sainte-school.org
bereanchristian.com
admin.bpusd.net
www.bereanchristian.com
admin.bereanchristian.com
admin.afsenyc.org

Certificate

The complete raw certificate details for bereanchristian.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIF9DCCBNygAwIBAgISBGIz93sGGCQgsl7gYwX1biH1MA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDAyMDYwNDAwMTlaFw0yNDA1MDYwNDAwMThaMB4xHDAaBgNVBAMT
E2JlcmVhbmNocmlzdGlhbi5jb20wggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIK
AoICAQDFPkahhBBJ/6WsiWqHpr6hecfuKtuzWRa9eQ8F/XQGNKkWd6qaj26o4krU
mOIjTWDcWtszZwSuPrtRSsUAEgect6X96yauD21alxbfqO+ZwgEx2o/nuMVRpoZ6
xJkqWlJVyMXMT6xLG2u1gZZleWg9JDlry1r2qKiodhzggrmLHMrZDJtDEn+vppgG
Y3+z+RpCaxejdoF4THTBCnM1+WfzpBz4L5ENoJ6cuQNIITVlcGN8vELZJaKdiPGl
8wUBbutRO49qGzt4MjnP8nRyzZT2DL2RyT/+LBfpwSeqNp9j9PrTqIV6Afbp8nZu
bd+oyzuNjXUVlFAfYIlM7IAqKpRPyCIT4098MMZ1vIi/fouI3swNNmeTtdOr9Mn/
mvhzOHlaYUX8/qlJXNlwCp7BO20AnlO7I085T1tzF1nmKKCKINQzEj4Yatfi+ovY
PmJScr3YtxQtozUI3pHYOC9wPsWgH/7JTtpuvb6cYo4sRMW4YiFBy3zinUhlWSJi
l64+aNyK+psAxVDzTcyq/BY8iv3xtb7femqVXLCDcxWqYa4eJ1o+eNmtBUTfFbtk
ZomZDn3eG02d11GBcHWYQUFmW8w22FICL2QCww0R9JMDbYY4h1JZGInm1h1qeFR4
L6SV1FqnllIIpvlIzvZwsUWtcmJEuKhCOHfKFyR1BSkXKrC7XQIDAQABo4ICFjCC
AhIwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcD
AjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBR1IC9BdI6KA/fnzY9UbPZUPx+WmDAf
BgNVHSMEGDAWgBQULrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcw
IQYIKwYBBQUHMAGGFWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYW
aHR0cDovL3IzLmkubGVuY3Iub3JnLzAeBgNVHREEFzAVghNiZXJlYW5jaHJpc3Rp
YW4uY29tMBMGA1UdIAQMMAowCAYGZ4EMAQIBMIIBBQYKKwYBBAHWeQIEAgSB9gSB
8wDxAHcASLDja9qmRzQP5WoC+p0w6xxSActW3SyB2bu/qznYhHMAAAGNfMnbQQAA
BAMASDBGAiEAgmGFhIaKf69Pj0nAov0xZGL74IZhty0x6LzV6r2Yb5YCIQDUqobF
OH7/b+HQzQLR2jj9IIMle3bJzmoJuN7ZaKlvLQB2ADtTd3U+LbmAToswWwb+QDtn
2E/D9Me9AA0tcm/h+tQXAAABjXzJ22MAAAQDAEcwRQIgPeOXyAdp89rzeylzgelt
pK2NQlmdK/rLCMqhorI2DHYCIQC2fajGN9Ck7fB65KUb303u2I0JN1YWENukwKek
CrCiPzANBgkqhkiG9w0BAQsFAAOCAQEAABRC/++tHdlgIirdC0TRU7gO7uIbe7na
KU1XkWT80kwKEebQO6b6Bz2+E+iwEUVkhtnJWGiXAaw8D4Onii1Fzfl4ZamaH7so
o2AturcBH8kmdrndwYnj7/WewKH1hEo7KsS6ZVrG3HU8pvJVuv/Pu09qSa3Jtf84
FsWxnSBC8sC3XcRBzEOjWBYdpnSrTkJv9wTZhfaTS5rHZQgrPKkmMWuloRCeoeWN
3HiOQSZ+ALyDMkgqngVPfvHcfD4vyWGknAXaWX70ivXOoI5wTLMCMMXqBxMvcCnR
aEuLG2V4A+HiPpOQo2GtK00UooI2F0+W/f1dtm1gbbR4088PYXJwwA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 381865891305621266358061001780544943301109
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-06 04:00:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-06 04:00:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bereanchristian.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 804682317002794703813273511526013911883400006703325577723247692503361338277208234403057626215357521948984997889707495816167718906635381459520363074396010912952487612866772160326034699191359155913579564935259208355216530223956262969101675759691982988885182185087973316598624577753021771631920837533551914700179735055555935825232851264327677683209627928510273068482138359693514276394231511426906852913143587645077972752605438768080356283148193775497446951072990542278407689293564407819166407486753514762472289001880298623036224334194951980242506495618314696908964060531226970076290537088226880383205321072335936260288362687672876196565307044789942322374538269760546300786086851465405859252967554551775369186798601018885833477802673550009601892877104869511839150325738925621181335859588194133045001541802481077081576572423662919919825623906264359973987919055582973293867284036395694858793679427675168716652837533441551058666469058969880130043432802395424659078773074713773198348362997737660806080011253873556082322043739598499460602569116641086321480037866335864524901520195273489283257503255112861755519011673904247506470943583332784620479841095394757466367363974994815543846543421560244309789254115773025407874262764623273623834114909
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							75202f41748e8a03f7e7cd8f546cf6543f1f9698
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bereanchristian.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d7cc9db41000004030048304602210082618584868a7faf4f8f49c0a2fd316462fbe08661b72d31e8bcd5eabd986f96022100d4aa86c5387eff6fe1d0cd02d1da38fd2083257b76c9ce6a09b8ded968a96f2d0076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018d7cc9db63000004030047304502203de397c80769f3daf37b297381e96da4ad8d42599d2bfacb08caa1a2b2360c76022100b67da8c637d0a4edf07ae4a51bdf4deed88d0937561610dba4c0a7a40ab0a23f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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