b-low.xyz.museum.bible

Issued by R3

About this certificate

This digital certificate with serial number 04:e0:5f:83:9e:c3:af:6a:ac:d2:40:9f:b2:04:16:46:52:60 was issued on by Let's Encrypt.

With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=b-low.xyz.museum.bible

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:e0:5f:83:9e:c3:af:6a:ac:d2:40:9f:b2:04:16:46:52:60
Serial Number (int): 424799353987943735378863304538046947807840
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 9a:70:aa:eb:07:05:c2:0a:e6:c3:1b:e0:7a:3b:8d:2b:bb:1d:11:e4
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 0a:c7:20:7f:b6:0f:a3:7b:92:fd:bf:7b:f4:64:15:d8:e5:95:20:8b
Fingerprint (sha256): d4:29:84:ec:a9:a8:4b:0b:09:25:0e:19:a4:20:ea:7a:5d:db:09:54:64:87:61:5b:c9:26:af:e3:11:9f:96:df

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate b-low.xyz.museum.bible

10

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for b-low.xyz.museum.bible

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

available-for-development.com
b-low.xyz.museum.bible
charitycouncil.com
doctorcarson.com
estacaodosgraos.com
ffcra.tax.booostr.com
politicaladvertisingagency.com
thehomepainters.com
totalenergysystem.com.get-structure.org
usa-precisionarms.com

Other certificates including the domain name museum.bible

(limited to 100 certificates)
dumptruck.ca
starband.ca
starband.ca
portland.world
starband.ca
flanaganinstitute.ie
usc.mba
dumptruck.ca
5272653.ca
dumptruck.ca
starband.ca
museum.bible
museumofthe.bible
museum.bible
museum.bible
dumptruck.ca
starband.ca
museum.bible
portland.world
portland.world
flanaganinstitute.ie
thematch.co.za
allanblock.on.ca
dumptruck.ca
museum.bible
starband.ca
health.clinic
museum.bible
portland.world
vinama.cc
discord-teespring.hacker.rehab
starband.ca
dumptruck.ca
ebaytes.ca
starband.ca
museum.bible
starband.ca
photo-studio.co.za
b-low.xyz.museum.bible
arbitrageur.asia
ebaytes.ca
starband.ca
5272653.ca
starband.ca
museum.bible
museum.bible
starband.ca
dumptruck.ca
starband.ca
starband.ca
health.clinic
portland.world

Certificate

The complete raw certificate details for b-low.xyz.museum.bible in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2L4EONPpevdd9Mb+Szs
qHLQ1aCyAK9qjsW2dQVd0estcarw/586m/gEUVFpKLnlp9kxkpZr44q0b1eI9+VR
i6Wc2aaFdPVDQPjmar1CWcbBlZTLtZzZyy9/fcyybkWJOCH2aXJUVNRZC/RbysK6
M2dE16J/Yl+uGahdXEsflGMcERkwkO64FGiguDKhIZRPvZBd98MbRwRBo2Bj7h6H
oS6Ztv27ClKPtYx78ABCQeNZDyZGY9KYmtHE8lcHf+hKBVZEeMw2LzNPP+byaAhY
IWA7ZjdnrFKa+hsZG2QP256eN8X6rhBrU8T15ltJa8uVCqHxdx5m4ODUSHOjFpoW
bwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 424799353987943735378863304538046947807840
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-18 01:39:57 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-17 01:39:56 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'b-low.xyz.museum.bible'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23655366465273609605431894657095189727296852783601158456571894142523703546246215182492220370176924525921666648049982236024646753302380997627161704437818853331689574581506096018390266462209004832779818334288101922302174586182278963034140275874829010421497387579999630715096414894332153371426424718477883871954585917951901101547202460763477266733668916628766720324558763517188168207269828627239946946771317847765042173400352750744297225093770477934231445850562132473820859335489200035193367734237056584876975003538245064670642431618842895318767761466129717065192099024983840830868572793705936227792783191214706113779311
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9a70aaeb0705c20ae6c31be07a3b8d2bbb1d11e4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (257 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'available-for-development.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b-low.xyz.museum.bible'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'charitycouncil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doctorcarson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'estacaodosgraos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ffcra.tax.booostr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'politicaladvertisingagency.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thehomepainters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'totalenergysystem.com.get-structure.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usa-precisionarms.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee0075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018c7acb5de900000403004630440220135824314782c732c0c560488372f7d61d404350e141ed309b6b12ea164d367502206371e9dd3e872fac17534f0736abcd5519586e48a987d4d43d1afba9c80e01a900750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c7acb5fe8000004030046304402203ab7ad3164a7619d7aebba6d6456fb78a30b27dbbc0f708bc4b6c76cc5de2daa02202f177fd70eed7f46a90249ebfb9a3c739565c5cd942075f6988fd4ec484247fd
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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