exchangedbyfaith.church
Issued by R3
About this certificate
This digital certificate with serial number 04:d1:dc:23:b3:af:64:8b:22:d0:c2:73:d6:92:3e:fd:82:f7 was issued on by Let's Encrypt.
With 13 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=exchangedbyfaith.church
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:d1:dc:23:b3:af:64:8b:22:d0:c2:73:d6:92:3e:fd:82:f7Serial Number (int): 419860773947427219861074447953448151122679
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: c2:a7:7e:c3:df:81:4f:ed:04:0e:8c:06:e5:46:bb:a6:80:cb:c4:54
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): ff:a6:21:fb:8b:99:b5:ce:3b:68:df:26:36:46:56:60:e6:99:66:a7
Fingerprint (sha256): c6:d9:2b:5d:4a:93:d8:2e:7d:94:10:99:c6:56:4e:84:09:c3:57:c6:c4:b9:a4:1a:22:b5:cb:58:62:6c:5e:63
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate exchangedbyfaith.church
13
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for exchangedbyfaith.church
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
alamoheightsvisitorguide.com
entertainmentlawyerlosangeles.co
exchangedbyfaith.church
falconry-uk.com
jesustherapy.com
masterresellrightsproducts.com.rxsugarww.com
northwesternrailway.com
oldtoytrucks.com
pinehurstnc.com
pressurewasherescambia.com
swealthyinside.com.hempmasonry.com
ttreeoil.com.findingfiction.com
www.trafficblockchain.com
entertainmentlawyerlosangeles.co
exchangedbyfaith.church
falconry-uk.com
jesustherapy.com
masterresellrightsproducts.com.rxsugarww.com
northwesternrailway.com
oldtoytrucks.com
pinehurstnc.com
pressurewasherescambia.com
swealthyinside.com.hempmasonry.com
ttreeoil.com.findingfiction.com
www.trafficblockchain.com
Other certificates including the domain name exchangedbyfaith.church
(limited to 100 certificates)
Certificate
The complete raw certificate details for exchangedbyfaith.church in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGTDCCBTSgAwIBAgISBNHcI7OvZIsi0MJz1pI+/YL3MA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDAxMDcwNzUwMDdaFw0yNDA0MDYwNzUwMDZaMCIxIDAeBgNVBAMT F2V4Y2hhbmdlZGJ5ZmFpdGguY2h1cmNoMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A MIIBCgKCAQEA0G0+vY9EKiymK7SfSKPPC9LVvw8GiXMUgClju+14EcP8mDvA9gho wI0wIWVBi0rN4HLhDsHUH60m7rUXLAJsjrT+gvVZfbFZny0H/wDSnZ3NbtNMZwDN rNDWzVH/5bCDZjGguq2wIA9YYXKB3CXsHS7A+53dM9uCBHB3vJOZuuEv9vOlcFxH ZVRd6BOyuOt/h+xGtlInt10JCgt/peXI4PSIDO82va4r0ImWBPYyActbhu+fkrsc /6gdPKm7W5zS5/FGr1f1aAj3rdnm3FqHDQqzHvhDdrcrmUN65TcakNkk52DtErTD JoEzDebFxMiKpzpdqmMNkzUeBUv1yL5nIwIDAQABo4IDajCCA2YwDgYDVR0PAQH/ BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8E AjAAMB0GA1UdDgQWBBTCp37D34FP7QQOjAblRrumgMvEVDAfBgNVHSMEGDAWgBQU LrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGG FWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmku bGVuY3Iub3JnLzCCAW8GA1UdEQSCAWYwggFighxhbGFtb2hlaWdodHN2aXNpdG9y Z3VpZGUuY29tgiBlbnRlcnRhaW5tZW50bGF3eWVybG9zYW5nZWxlcy5jb4IXZXhj aGFuZ2VkYnlmYWl0aC5jaHVyY2iCD2ZhbGNvbnJ5LXVrLmNvbYIQamVzdXN0aGVy YXB5LmNvbYIsbWFzdGVycmVzZWxscmlnaHRzcHJvZHVjdHMuY29tLnJ4c3VnYXJ3 dy5jb22CF25vcnRod2VzdGVybnJhaWx3YXkuY29tghBvbGR0b3l0cnVja3MuY29t gg9waW5laHVyc3RuYy5jb22CGnByZXNzdXJld2FzaGVyZXNjYW1iaWEuY29tgiJz d2VhbHRoeWluc2lkZS5jb20uaGVtcG1hc29ucnkuY29tgh90dHJlZW9pbC5jb20u ZmluZGluZ2ZpY3Rpb24uY29tghl3d3cudHJhZmZpY2Jsb2NrY2hhaW4uY29tMBMG A1UdIAQMMAowCAYGZ4EMAQIBMIIBBgYKKwYBBAHWeQIEAgSB9wSB9ADyAHcASLDj a9qmRzQP5WoC+p0w6xxSActW3SyB2bu/qznYhHMAAAGM4x10lgAABAMASDBGAiEA qDSgEAPrpo8z0Q4dc+uYwN2A4X3J47efuhFXdXDZkZ0CIQDRummK9IanSrqENpEg olw1veMnI5euUDKO2Bq+Cw2G3gB3ADtTd3U+LbmAToswWwb+QDtn2E/D9Me9AA0t cm/h+tQXAAABjOMddJYAAAQDAEgwRgIhAJJe91imuGfqUkUDrPcCeFWiYV8rX3hi h5UGNg85e+YsAiEAvAbBg7LD9Lv2fD1oRyceu9fscG0WCelcR/jJtckBQJIwDQYJ KoZIhvcNAQELBQADggEBAFVdQ3P0m/l95neLXpQwvN/tA5+opSc1IsmEOERDkEZf xGtzuaJuS9atCQm/2jSpw+h29tlC3mvd9d+XpVDzMjBjlR/vuEAKerfWs0vf2TKi tyQRKKHehwxg5rhO/aHqqRuayBYgfHp1JXBMFnhNm/sRKFlsvOqcoybxszux4AWy 2kfkb+NgzojMWHu/dYztU77Lb45xgW++ppwqJRygNRkEt2iDZxey9EA6+o7G7TZf W/7VNM66dMP+Ol0lJczMm0hE7xFgB4gbjAlz5MjP5gdC3eYAwrz+7G/i8jrkTNhn LziILYeUXPKWtSN4JaCpmu5WUKJ7bNDHY9sT3kvT6wc= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0G0+vY9EKiymK7SfSKPP C9LVvw8GiXMUgClju+14EcP8mDvA9ghowI0wIWVBi0rN4HLhDsHUH60m7rUXLAJs jrT+gvVZfbFZny0H/wDSnZ3NbtNMZwDNrNDWzVH/5bCDZjGguq2wIA9YYXKB3CXs HS7A+53dM9uCBHB3vJOZuuEv9vOlcFxHZVRd6BOyuOt/h+xGtlInt10JCgt/peXI 4PSIDO82va4r0ImWBPYyActbhu+fkrsc/6gdPKm7W5zS5/FGr1f1aAj3rdnm3FqH DQqzHvhDdrcrmUN65TcakNkk52DtErTDJoEzDebFxMiKpzpdqmMNkzUeBUv1yL5n IwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 419860773947427219861074447953448151122679 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-07 07:50:07 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-06 07:50:06 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'exchangedbyfaith.church' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26311438189654367719503600292394526372105814956083927065691403171312274740426438775954296315903410246691790706171178277560834569155712122536879872461608431376354452156000204940763716980331901963906986046208335713657625420873304219371925804895911790319803349431576009632946851592533567973158298576029612453076443539598425941680259815513768452843030582314553702935045974713153497300276887186706626390261456257229700451716916723008851669353916808017488880375977090483405626069238535993426648647679286212037949098007186491282765570519781405391875884665176412138725514393419298191081133327316078846664521293049015677380387 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) c2a77ec3df814fed040e8c06e546bba680cbc454 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (358 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alamoheightsvisitorguide.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'entertainmentlawyerlosangeles.co' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exchangedbyfaith.church' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'falconry-uk.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jesustherapy.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'masterresellrightsproducts.com.rxsugarww.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northwesternrailway.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oldtoytrucks.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pinehurstnc.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pressurewasherescambia.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swealthyinside.com.hempmasonry.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ttreeoil.com.findingfiction.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trafficblockchain.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) 00f200770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018ce31d74960000040300483046022100a834a01003eba68f33d10e1d73eb98c0dd80e17dc9e3b79fba11577570d9919d022100d1ba698af486a74aba84369120a25c35bde3272397ae50328ed81abe0b0d86de0077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018ce31d74960000040300483046022100925ef758a6b867ea524503acf7027855a2615f2b5f7862879506360f397be62c022100bc06c183b2c3f4bbf67c3d6847271ebbd7ec706d1609e95c47f8c9b5c9014092 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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