alliancebiblique-tchad.org

Issued by R3

About this certificate

This digital certificate with serial number 03:05:79:26:c1:25:32:0b:74:4f:7f:19:9a:53:02:22:8d:25 was issued on by Let's Encrypt.

With 14 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=alliancebiblique-tchad.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:05:79:26:c1:25:32:0b:74:4f:7f:19:9a:53:02:22:8d:25
Serial Number (int): 263199307442108015016996035000749487459621
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 86:24:d6:48:06:12:79:5e:70:de:27:9a:57:36:6c:2c:4c:04:a7:d3
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 27:fa:fd:5d:35:8e:87:ae:c9:41:ef:1b:c0:4f:2c:d2:2b:82:1a:91
Fingerprint (sha256): b4:a2:0a:16:be:4d:a0:88:0c:06:11:36:80:46:b8:de:e2:77:d1:e7:5e:ff:c9:d0:c5:fd:00:7b:f8:d2:7b:00

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate alliancebiblique-tchad.org

14

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for alliancebiblique-tchad.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

alliancebiblique-tchad.org
bathroommaker.com
cosmeticsurgeryseo.com
cotko.com.lansingerlaw.com
dataminig.com
isanyoneup.com
japnesexxx.com
kodiakpinedesigns.com
locolingo.com
motorcycleduiinsurance.com.swealthytreats.com
neoprene.bdsmsecurity.com.deplorablesshirts.com
sacondolife.com
supercrosesuperfood.com
vegas4vip.com.cameronparish.com

Other certificates including the domain name alliancebiblique-tchad.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for alliancebiblique-tchad.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9bsW/qmN6bbdWC/gsLIh
YNdN5Tx6zrshG1xXo7ih4vtsuPW2YW4MMNAgo8KA/4PoFdxrxV5SF4aikYzrkUir
5xiNYLWMbb9mW2WbIiJYQ4lKlB8+lnwmt7ccbD6jXfGS1CSAK78mxmJ9P3aRkOjE
Aohua9HOoeSwuW4ELiMHlFkwXslHfCF34hH2Sa1tkeuV71yvRzHf+XbB9JnC19nE
sNmtLywlASRQdkxDbWBRjCZnuoxmuJGcJg2fhT8qGqmf4ozCrSUKA9Qz8T9Ofpfc
nWSVdx4s2EAh4AoV7RsK38msga8uXCn3pZ64mM6bfDmQJsCU/FolrtRHmp6HWBUQ
wQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 263199307442108015016996035000749487459621
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-10 20:56:57 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-09 20:56:56 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'alliancebiblique-tchad.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 31020642147054168488530501655819998437730917177119410198659199742348870034240140382856367109336215486361651674840826578357219424327928252974832709368693555761223858212658830649286645936040371689778369254661746270385316588311827614231019577222846748158394347023405844844800555545492540507648898509381706886756654933191493960108394351784461090078071038382798285052714490557710178961475057380064600337248705087434655747920188655787842843060879301664216027770323008377255995666451044632531527604116959318307185248710782512512968512553347059766069904513744968318711637012389369338508104667014158463129263644139568441397441
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8624d6480612795e70de279a57366c2c4c04a7d3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (359 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alliancebiblique-tchad.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bathroommaker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cosmeticsurgeryseo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cotko.com.lansingerlaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dataminig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'isanyoneup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'japnesexxx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kodiakpinedesigns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locolingo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'motorcycleduiinsurance.com.swealthytreats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neoprene.bdsmsecurity.com.deplorablesshirts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sacondolife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supercrosesuperfood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vegas4vip.com.cameronparish.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018c55bbc33a0000040300473045022100b39c86fcb8d6cce7787ed59ad5326fd8804e0fe434f06c440cd29410e25fb30a02201e33ffeeaadb1c2928eea242fe7f0e58452a1c3088038cb1b20fbf953cbca9d800760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018c55bbc38e000004030047304502210088dddf00cf312994dc9e1d790fab93f31ecbd8598604f17e18f832b8fd852fcc0220744ec4f48f00e4fd029a3ba331d94dc0777f5821119b4d188ead99b5b61038b8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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