exchangedbyfaith.church

Issued by R3

About this certificate

This digital certificate with serial number 04:d1:dc:23:b3:af:64:8b:22:d0:c2:73:d6:92:3e:fd:82:f7 was issued on by Let's Encrypt.

With 13 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=exchangedbyfaith.church

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:d1:dc:23:b3:af:64:8b:22:d0:c2:73:d6:92:3e:fd:82:f7
Serial Number (int): 419860773947427219861074447953448151122679
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: c2:a7:7e:c3:df:81:4f:ed:04:0e:8c:06:e5:46:bb:a6:80:cb:c4:54
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): ff:a6:21:fb:8b:99:b5:ce:3b:68:df:26:36:46:56:60:e6:99:66:a7
Fingerprint (sha256): c6:d9:2b:5d:4a:93:d8:2e:7d:94:10:99:c6:56:4e:84:09:c3:57:c6:c4:b9:a4:1a:22:b5:cb:58:62:6c:5e:63

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate exchangedbyfaith.church

13

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for exchangedbyfaith.church

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

alamoheightsvisitorguide.com
entertainmentlawyerlosangeles.co
exchangedbyfaith.church
falconry-uk.com
jesustherapy.com
masterresellrightsproducts.com.rxsugarww.com
northwesternrailway.com
oldtoytrucks.com
pinehurstnc.com
pressurewasherescambia.com
swealthyinside.com.hempmasonry.com
ttreeoil.com.findingfiction.com
www.trafficblockchain.com

Other certificates including the domain name exchangedbyfaith.church

(limited to 100 certificates)

Certificate

The complete raw certificate details for exchangedbyfaith.church in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0G0+vY9EKiymK7SfSKPP
C9LVvw8GiXMUgClju+14EcP8mDvA9ghowI0wIWVBi0rN4HLhDsHUH60m7rUXLAJs
jrT+gvVZfbFZny0H/wDSnZ3NbtNMZwDNrNDWzVH/5bCDZjGguq2wIA9YYXKB3CXs
HS7A+53dM9uCBHB3vJOZuuEv9vOlcFxHZVRd6BOyuOt/h+xGtlInt10JCgt/peXI
4PSIDO82va4r0ImWBPYyActbhu+fkrsc/6gdPKm7W5zS5/FGr1f1aAj3rdnm3FqH
DQqzHvhDdrcrmUN65TcakNkk52DtErTDJoEzDebFxMiKpzpdqmMNkzUeBUv1yL5n
IwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 419860773947427219861074447953448151122679
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-07 07:50:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-06 07:50:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'exchangedbyfaith.church'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26311438189654367719503600292394526372105814956083927065691403171312274740426438775954296315903410246691790706171178277560834569155712122536879872461608431376354452156000204940763716980331901963906986046208335713657625420873304219371925804895911790319803349431576009632946851592533567973158298576029612453076443539598425941680259815513768452843030582314553702935045974713153497300276887186706626390261456257229700451716916723008851669353916808017488880375977090483405626069238535993426648647679286212037949098007186491282765570519781405391875884665176412138725514393419298191081133327316078846664521293049015677380387
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c2a77ec3df814fed040e8c06e546bba680cbc454
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (358 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alamoheightsvisitorguide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'entertainmentlawyerlosangeles.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exchangedbyfaith.church'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'falconry-uk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jesustherapy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'masterresellrightsproducts.com.rxsugarww.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northwesternrailway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oldtoytrucks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pinehurstnc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pressurewasherescambia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swealthyinside.com.hempmasonry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ttreeoil.com.findingfiction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trafficblockchain.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f200770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018ce31d74960000040300483046022100a834a01003eba68f33d10e1d73eb98c0dd80e17dc9e3b79fba11577570d9919d022100d1ba698af486a74aba84369120a25c35bde3272397ae50328ed81abe0b0d86de0077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018ce31d74960000040300483046022100925ef758a6b867ea524503acf7027855a2615f2b5f7862879506360f397be62c022100bc06c183b2c3f4bbf67c3d6847271ebbd7ec706d1609e95c47f8c9b5c9014092
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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