exchangedchurch.org

Issued by R3

About this certificate

This digital certificate with serial number 03:a6:78:ed:2f:fa:b3:db:94:a1:2b:a4:97:c5:f4:32:3d:98 was issued on by Let's Encrypt.

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=exchangedchurch.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a6:78:ed:2f:fa:b3:db:94:a1:2b:a4:97:c5:f4:32:3d:98
Serial Number (int): 317984469611142142807278722677023972670872
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 95:fc:9d:db:c3:e5:cf:c5:a2:38:e9:23:94:3f:1d:ba:bc:85:2d:b1
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 51:60:fb:8b:83:d0:f5:0b:6c:db:4d:5b:c8:90:08:4c:f0:78:fb:ab
Fingerprint (sha256): b2:39:18:75:ed:90:dc:5e:4d:e8:3c:2d:63:07:9b:94:04:4f:b1:4f:c8:24:6e:fc:3f:71:33:18:61:d7:d5:ec

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate exchangedchurch.org

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for exchangedchurch.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aacconservation.org
autonetworkofpensacola.com
exchangedchurch.org
numismology.com
republicanroadmap.com.findability.info
simiyachtclub.com
smithtownchristmaslightsinstalled.com.www.shop.gutrad.de.surrogacyminnesota.com
telladf.adult

Other certificates including the domain name exchangedchurch.org

(limited to 100 certificates)
exchangedchurch.org
exchangedchurch.org
shiftcrm.ca
fltd.org
helpnow.ca
yourfreedomfund.org
programming.vc
exchangedchurch.org
sculpit.life
exchangedchurch.org
gaymeetgay.com.exchangedchurch.org
exchangedchurch.org
ronhouse.name
explorerlabible.ca

Certificate

The complete raw certificate details for exchangedchurch.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0fWj/Hjnm1OD0DqTCAAl
AG5UDQSKDWF1t2ekdC2uV+ud3q/395cNXvR7oZZDQFZkEnMibyWja31hsndQL63w
JM3l5j5U1DqFfNeHoE5eVvHrcKHHKHDZgx38gscGcOIUmKp+uiqJpzz4rNxk+w5m
eCECBKieIpzuANgg7GpL8JtiTjJUVjLvFAo3z5hOXvIxJA2QrcesrquHMnqzKGLy
EU69l3mLqJL5mpxbpFDGlIQqjbb1tlmfD97Xg6HDNxlGyfqxWFGtMmZ1uEC3CKrD
9R4C8lhJUREO83Y1/VGt2AWEIQK/o62c8YDwXAGCA/OwBWw6oDJkKkZ0QrSn+r5t
AQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 317984469611142142807278722677023972670872
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-18 15:21:53 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-16 15:21:52 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'exchangedchurch.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26504935618123293903821372092931847035513764860278281112828920136120783632670700078872464383938963245597707378306396575300010641680233855934499620095542146459104830382762382098015748499267346931227535989909398561111387367734129030871113907371479636829408253887321634826495821927957487922649768386515613061129612621573002768897743332131873998326107119454871253095343913803548026831263716847307499675811038330053113307080020531633598812340809128685558656003056719698444964760609917907040654829851431043255800984928488133883088283269810339658742892803643895071228805360487752617160587170593778020051369098836940441939201
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							95fc9ddbc3e5cfc5a238e923943f1dbabc852db1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aacconservation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autonetworkofpensacola.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exchangedchurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'numismology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'republicanroadmap.com.findability.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simiyachtclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smithtownchristmaslightsinstalled.com.www.shop.gutrad.de.surrogacyminnesota.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'telladf.adult'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018be33d18350000040300473045022100dfbfd344aa24138ef66faee8e6895ad32d6663d0011837c29bc0b9f6cf76508302206af45a39f6b993e7d9c1cf3ef2fd14212ba808d19c254f6873bd41327df714d500770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018be33d18c90000040300483046022100ab99084fb062864cdd971037f20d8dcd4bec02ac8cf4110629e77ec25315db2b022100f2cb44ed58d35c4aacc568bb368c6f8f3404681723e96e1bb845b511dca46284
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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