churchofthegreatgod.org

Issued by R3

About this certificate

This digital certificate with serial number 04:d5:25:bd:0d:4e:04:5b:38:69:7b:12:56:db:01:75:e9:41 was issued on by Let's Encrypt.

With 12 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=churchofthegreatgod.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:d5:25:bd:0d:4e:04:5b:38:69:7b:12:56:db:01:75:e9:41
Serial Number (int): 420979450931003654016185126087828868294977
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: d2:77:e4:12:c7:d1:ed:91:48:e7:c2:be:d6:cc:5e:c7:12:79:fa:d9
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 2e:d7:d5:df:e4:ea:37:6c:cc:53:3a:2f:e7:3a:67:91:25:50:af:85
Fingerprint (sha256): cf:c0:26:31:95:27:75:e7:47:1f:31:46:65:80:59:ec:7c:5c:c5:29:49:d2:a1:9b:9c:1d:be:e9:80:c2:93:83

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate churchofthegreatgod.org

12

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for churchofthegreatgod.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

actionalerts.ca.steptown.com
churchofthegreatgod.org
citizensfree.com
compelworks.com.goldpay.co.in
dialoga.co
halfmarathonracecalendar.com.learningtodive.xyz
learntofindtreasure.com
louisianalending.com
mpksoftware.net
sariverwalkcam.com
seattlenaturopaths.com
www.blockchainegypt.com.martinomfg.xyz

Other certificates including the domain name churchofthegreatgod.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for churchofthegreatgod.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3t9ZAomBBEn8ne9qxuqw
ghacwQMSWJ6N7HzlTK1UCNBwzpsTkUCZlNVgo8VX/BqkaAik+ZN1j4EgeoUKF1y1
lTc60V6kMdbiLOrwHTYTMQTHiVG+WwC+iH78jtcfe8H9B9f3d8GvmjkY8n7xVL77
EaRuDPmfEI1TNgb4vpNL5LRcwfG6C9DkRtjO8pBq/vvIbaNLqp08C8JfnDdVt/pe
OQl8LyqUMxwrQKZCQ+rMb0UgRs+hdGPyg7Kz78XS1rxgXlr+0ql/6QpyETtR4Vq5
zoikJUFwawyw5CIOdv9WsMdg7GeRb4zkL+4NBhii20wx+kqvrlscuvis8oXDWiIG
4QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 420979450931003654016185126087828868294977
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-04 23:45:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-03 23:45:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'churchofthegreatgod.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28135040555708227737177994782142493902247592700112330305569306108587738919926859113484219559226827913248785258191329016518183714101176204963976019149175369692470505737900106300959314021126135662236777376269073460188376967571422016562286180246536160907956654528860273947573611094537505398603450434123064715315977887223046109452034947635134940376173207987371404912290950952311517112296674271131321230175601172984888506567811244615035482373757621050337264342303500063750833364955562833766183966792260688736423379149416485508705451969403424399172895019831132570926044818176190669930658429831899417781137803596459352917729
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d277e412c7d1ed9148e7c2bed6cc5ec71279fad9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (317 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'actionalerts.ca.steptown.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'churchofthegreatgod.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'citizensfree.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'compelworks.com.goldpay.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialoga.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'halfmarathonracecalendar.com.learningtodive.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'learntofindtreasure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'louisianalending.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mpksoftware.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sariverwalkcam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seattlenaturopaths.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blockchainegypt.com.martinomfg.xyz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018c376f80b0000004030047304502205cfc0a941beeb59e28f3257cc986135b4a5534f067ea92395b6a65d8c0a2ef7b022100f3fe8e0515a3ec24676fafc00694783e072fb12589df80c63a24d9f78c0267e200760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c376f82980000040300473045022100e054c4e3d653279fb0feaf101e6dd985c866e7d3a32fa271e9c78231907936c602203634a6b93b38758059f39c9abac23ea872dc1741d1d4479b0e932f9317e77b55
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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