catholicyouth.bible

Issued by R3

About this certificate

This digital certificate with serial number 03:2f:a5:09:48:95:ca:2b:13:55:3a:ed:52:59:6b:fe:cb:6e was issued on by Let's Encrypt.

With 11 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=catholicyouth.bible

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:2f:a5:09:48:95:ca:2b:13:55:3a:ed:52:59:6b:fe:cb:6e
Serial Number (int): 277549499862742141379765084516237640125294
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: c7:29:73:44:86:22:92:3f:c4:1b:ba:c2:ba:72:5e:71:2a:89:d6:f4
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): a6:f2:8a:8f:94:15:06:6a:eb:b3:92:9b:2d:3d:50:d9:80:11:eb:8e
Fingerprint (sha256): bd:3c:fa:80:61:2d:27:36:29:20:a0:33:c1:ab:48:42:d6:ed:22:dc:89:08:16:e1:bb:fe:83:1d:26:01:c1:40

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate catholicyouth.bible

11

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for catholicyouth.bible

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

catholicyouth.bible
closeuk.com
fhginvestmentgroup.com.saveof.com
hireremotetechteam.com
integritymedicareplans.com
neetclasses.com
odontoguia.com
psrope.com
pupoholic.com
worldtravelbooks.com.readymadearticles.com.oysterbake.org
www.africhain.org.hardemancounty.com

Other certificates including the domain name catholicyouth.bible

(limited to 100 certificates)
corona.cc
corona.cc
rental.world
trailerskirts.ca
corona.cc
catholicyouth.bible
ultimateloghome.ca
5272653.ca
corona.cc
qdd.co.za
cbdc.co.za
allanblock.ae
justwanna.world
justwanna.world
vacancy.vc
catholicyouth.bible
gooseandmaple.ca
icu-management.ae
catholicyouth.bible
pandaradio.ca
enerpactoolgroup.co.za
playgolf.club
playgolf.club
corona.cc
ultimateloghome.ca
playgolf.club
allanblock.ae
allanblock.on.ca
catholicyouth.bible
corona.cc
allanblock.ae
playgolf.club
corona.cc
allanblock.ae
ultimateloghome.ca
catholicyouth.bible
biblecourse.ca
catholicyouth.bible
ultimateloghome.ca
ultimateloghome.ca
playgolf.club
justwanna.world
rental.world
playgolf.club
justwanna.world
ultimateloghome.ca
rental.world
rehling.family.catholicyouth.bible
corona.cc
ultimateloghome.ca

Certificate

The complete raw certificate details for catholicyouth.bible in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAylfM9OTGaK4JlwjIvDmO
s/EKHzaK343gvXmjtyXekEgOLERIf+aHEAZcflAKaLJxGztMfNhh2b/2Uv5px5nV
JiZUESB2pXlcBR/BcWs6pUf4xB5ATpBoN6lSBq+InVJjqwJQxXUHjiK05VfxYqrm
uiyV1OleCeTbq741KHMgpDHQAiR4MH2ntDBNYH+r5vFpj7ylnFfaQ+9lvRHKHqbp
V9TseJWkucByRz0qzEXC6soAzTfCkKObsc4iO9D9BSauRx457m+JrHfjxMOavI0S
b8y00jDRG2zX2cIDEgI7vUoFexoWyabNKxxy1CcSn63W3j9eyIvPfeRzzs3vIzR/
UwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 277549499862742141379765084516237640125294
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-10 02:15:50 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-09 02:15:49 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'catholicyouth.bible'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25543433698480420316311533939735321866663072543081373260658775363849523326006495021618062250101979577559501275495832373734087620028527359727209133521524911906332937610026427643118046639774497527592610047557324693731275129735840956238235148916254051654974809080645670682105866202543635634154563873169378057254643048053330485713311561934881222064681060728761641630990860326444013825894059710194434164375850569456072973596680328904079207990271711130556139210640328574887258504590109655762303148505627423450807585217507259806843530090189916673535220100025055996473964446482632168840118770526546779464984597864932240031571
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c72973448622923fc41bbac2ba725e712a89d6f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (282 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catholicyouth.bible'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'closeuk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fhginvestmentgroup.com.saveof.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hireremotetechteam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'integritymedicareplans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neetclasses.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'odontoguia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psrope.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pupoholic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'worldtravelbooks.com.readymadearticles.com.oysterbake.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.africhain.org.hardemancounty.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c51b959f40000040300473045022100e4cb41907cc133594ef01da83b56ece753c6f45fb2bcc9b3b72097ef96c2e20702201d72a3f392f5c62f04928898852b4702ee624159f4375abd93e9d50cd18c55be0075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018c51b959f500000403004630440220329ec9942bad1ee9b5b6ad2753fe4fbefefdceec90345257907e7ec27003233502206d0b7f9ca71e8afff4426a67d4fdfce7b1da7b4218c5b81d44d30a818054f9c7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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