jeffersondavisparish.com.bettina.org

Issued by R3

About this certificate

This digital certificate with serial number 03:30:90:ea:1c:53:d9:7f:61:57:5d:36:87:7a:ee:32:b8:5a was issued on by Let's Encrypt.

With 11 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=jeffersondavisparish.com.bettina.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:30:90:ea:1c:53:d9:7f:61:57:5d:36:87:7a:ee:32:b8:5a
Serial Number (int): 277863035810894429852799071123374555183194
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 6b:cc:08:25:5a:c0:22:71:5f:e6:51:f0:b9:ac:31:82:0f:4c:b3:ca
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): f4:19:66:15:cc:76:b7:69:cd:ab:14:db:91:8c:1d:62:34:e1:19:36
Fingerprint (sha256): cf:29:1d:51:b9:b0:eb:60:af:cd:22:be:19:cc:e2:73:3f:18:e1:4a:bd:2f:79:4a:0b:51:86:43:e1:94:e9:b8

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate jeffersondavisparish.com.bettina.org

11

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for jeffersondavisparish.com.bettina.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bloodsugarcouncil.com
childcustodybyzipcode.com
interiorsmagazine.in
jeffersondavisparish.com.bettina.org
mortgagemasterwa.net
ohiocourt.com
paramb.com.digitaldollar.co
poweredbyrxsugarcertifiedallulose.com
rollups.vc.orderofthestarsandbars.com
sir.bdsmsecurity.com.fiecare.com
xn--c-0ga.at

Other certificates including the domain name bettina.org

(limited to 100 certificates)
babe.baby.gordian.xyz.upgrader.de
coaching4vip.com.whidbeyisland.cam.t-v.co.za
bettina.org
saaj.co.za
www.firearmsprotection.com.liquidproductions.me
arbitrage.gg
fc.vc
museum.bible
tristateelectricmc.net.t-j.in.nontraditional.vc
example316.bible
bettina.org
bettina.org
hudlot.com.bettina.org
jeffersondavisparish.com.bettina.org
offshoreforvip.com.saleslounge.se

Certificate

The complete raw certificate details for jeffersondavisparish.com.bettina.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGITCCBQmgAwIBAgISAzCQ6hxT2X9hV102h3ruMrhaMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzEyMTQxNjUzNTZaFw0yNDAzMTMxNjUzNTVaMC8xLTArBgNVBAMT
JGplZmZlcnNvbmRhdmlzcGFyaXNoLmNvbS5iZXR0aW5hLm9yZzCCASIwDQYJKoZI
hvcNAQEBBQADggEPADCCAQoCggEBAMCU4cyQZrfQlNsDM77a2aVi++zi7V1YTKlm
m/CT+NYOZJrcvXHO24IePZ9EX7amJxCdRH+kBXt54SG2Cgl+lAVytLxdbrc/Q4ch
K1hPczAwarkC7iitzOH6jQsUgqE8dQxp5ZeLEHSfcz/A2qVLgFNuCRZBiFIPLZZE
ntiE16kryMP+kapqKX5lB2M/P3jcnVyYIkuhfa7GSiwRozdE5SJk23s0bCiCCbdh
J/g8g7yxD4jftOrHXGvsB3J4BEcrl8dMDg352lY77MHlHAaoffdH/5YVPcXLCKao
sda0KguxkQfAKoLsfA3MiQmVyweXWmTd46kUGD564kE6CN23PlcCAwEAAaOCAzIw
ggMuMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUH
AwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUa8wIJVrAInFf5lHwuawxgg9Ms8ow
HwYDVR0jBBgwFoAUFC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBH
MCEGCCsGAQUFBzABhhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKG
Fmh0dHA6Ly9yMy5pLmxlbmNyLm9yZy8wggE7BgNVHREEggEyMIIBLoIVYmxvb2Rz
dWdhcmNvdW5jaWwuY29tghljaGlsZGN1c3RvZHlieXppcGNvZGUuY29tghRpbnRl
cmlvcnNtYWdhemluZS5pboIkamVmZmVyc29uZGF2aXNwYXJpc2guY29tLmJldHRp
bmEub3JnghRtb3J0Z2FnZW1hc3RlcndhLm5ldIINb2hpb2NvdXJ0LmNvbYIbcGFy
YW1iLmNvbS5kaWdpdGFsZG9sbGFyLmNvgiVwb3dlcmVkYnlyeHN1Z2FyY2VydGlm
aWVkYWxsdWxvc2UuY29tgiVyb2xsdXBzLnZjLm9yZGVyb2Z0aGVzdGFyc2FuZGJh
cnMuY29tgiBzaXIuYmRzbXNlY3VyaXR5LmNvbS5maWVjYXJlLmNvbYIMeG4tLWMt
MGdhLmF0MBMGA1UdIAQMMAowCAYGZ4EMAQIBMIIBAgYKKwYBBAHWeQIEAgSB8wSB
8ADuAHUAouK/1h7eLy8HoNZObTen3GVDsMa1LqLat4r4mm31F9gAAAGMaXa0ewAA
BAMARjBEAiBv+YmWPJMNTag9g8btjmxg4pSe3JcmYoA9k+GH11YnvwIgCNRQ/ovq
xuDOK50YUZznewix592JcCrhKkyP6dcQ4NkAdQDuzdBk1dsazsVct520zROiModG
fLzs3sNRSFlGcR+1mwAAAYxpdrR1AAAEAwBGMEQCIEb/YCfimf92GG0hY3B+7uGu
2X3Q9dh1/Um8G3QbBmrHAiBJ3fvYB7EVGEPlyFdsNGYCnrZObP463o1Z4s7qX9KQ
SDANBgkqhkiG9w0BAQsFAAOCAQEAq1QsY13i7Xgv9zxXfhpxkp3NWgbWqXJLuzS9
8GE356ZPlhNNxeRQzvm7ftMVzBXcAc4kalTxFQCQ/D9nYA9t4zgHWEYOegP4BxQy
bUx6j2YkUfrji+9jTM++bvkVN8JWUre1hoGbszd9frA7q38sqti9yamQr12F2DBL
Tr/3yy8XFnmQEOc14/EgjOkykKaz+4nvcuTX0GpXqq4h45CjqaErCKvlCZkSfv6Y
tBL8vu+SLRZtNt/85mVSKaixEfZkMdVJHZpg70mz0n6xNeowv7q1/DODr1U7sPoI
OyUurU8pcGzUTgm1o0oAUqxJR9erOKt5flzhMb8Qlc+rHlltbA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJThzJBmt9CU2wMzvtrZ
pWL77OLtXVhMqWab8JP41g5kmty9cc7bgh49n0RftqYnEJ1Ef6QFe3nhIbYKCX6U
BXK0vF1utz9DhyErWE9zMDBquQLuKK3M4fqNCxSCoTx1DGnll4sQdJ9zP8DapUuA
U24JFkGIUg8tlkSe2ITXqSvIw/6RqmopfmUHYz8/eNydXJgiS6F9rsZKLBGjN0Tl
ImTbezRsKIIJt2En+DyDvLEPiN+06sdca+wHcngERyuXx0wODfnaVjvsweUcBqh9
90f/lhU9xcsIpqix1rQqC7GRB8Aqgux8DcyJCZXLB5daZN3jqRQYPnriQToI3bc+
VwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 277863035810894429852799071123374555183194
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-14 16:53:56 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-13 16:53:55 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'jeffersondavisparish.com.bettina.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24311171017586536734391320032319895257820115214374706120593077253530921742645778292261177344862563418622243732079570643649927911234844459165380494543787008009521447713965295538204499644636917124163401763364891509864395776141211525522338484624513629340562040639972539106166079549027262651342327815861840300684680529943825587272091181229371285378677987924004002118752865836364665364721062860764922474791344323758709503090778086139445658925286199549671795595635669269131906103933306675587212479939999030658945890592652895247655816375936487493380268830039211689379868363315608772520998628241361515326379676861257540386391
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6bcc08255ac022715fe651f0b9ac31820f4cb3ca
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (306 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bloodsugarcouncil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'childcustodybyzipcode.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'interiorsmagazine.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jeffersondavisparish.com.bettina.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mortgagemasterwa.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ohiocourt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paramb.com.digitaldollar.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poweredbyrxsugarcertifiedallulose.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rollups.vc.orderofthestarsandbars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sir.bdsmsecurity.com.fiecare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--c-0ga.at'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018c6976b47b000004030046304402206ff989963c930d4da83d83c6ed8e6c60e2949edc972662803d93e187d75627bf022008d450fe8beac6e0ce2b9d18519ce77b08b1e7dd89702ae12a4c8fe9d710e0d9007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018c6976b4750000040300463044022046ff6027e299ff76186d2163707eeee1aed97dd0f5d875fd49bc1b741b066ac7022049ddfbd807b1151843e5c8576c3466029eb64e6cfe3ade8d59e2ceea5fd29048
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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