example316.bible

Issued by R3

About this certificate

This digital certificate with serial number 03:93:6a:23:39:68:93:19:c7:09:b5:46:96:2e:92:05:bb:25 was issued on by Let's Encrypt.

With 22 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=example316.bible

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:93:6a:23:39:68:93:19:c7:09:b5:46:96:2e:92:05:bb:25
Serial Number (int): 311499446794984545639630514362001738021669
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: a5:c9:30:5a:b1:31:73:c4:f4:92:4d:6e:6f:02:4f:87:64:be:cd:47
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 17:54:7c:2b:02:2a:03:89:f0:78:e6:f7:34:cf:8e:53:0a:dd:dc:28
Fingerprint (sha256): d6:18:ae:ad:ca:b5:a6:c3:73:82:06:64:6e:e6:50:dc:1e:f2:b5:29:a1:a2:6a:56:9e:23:ec:5e:5e:a6:2d:db

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate example316.bible

22

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for example316.bible

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

2060.net
arbitrageurr.com
betterseonyc.com
bihardental.in
emanuelcounty.com
example316.bible
exercisecycles.com
floridaplating.com
health-records.com
ihatethispodcast.com
labryn.com
latinostoday.com
lupoalberto.com
oestringen.com
onairbar.com
queertunes.com
realestateguides.com
seslikitap.info
shortsaleutah.com
sillabuss.io
themotioncapturefactory.com
usaprecisionfirearms.com

Other certificates including the domain name example316.bible

(limited to 100 certificates)
starband.ca
starband.ca
starband.ca
trojans.college
impossible.ca
example316.bible
www.example316.bible
annonces-rencontres.be
example316.bible
bduncan.pro.example316.bible
usc.college
starband.ca
starband.ca
halfmarathons.club
goldenoldies.ca
hydratight.ca
nextera.fund
example316.bible
example316.bible
xsa.co.za
starband.ca
example316.bible
xnft.llc
starband.ca
example316.bible
starband.ca
discord-teespring.hacker.rehab
starband.ca
example316.bible
example316.bible
starband.ca
lastortillas.ca
starband.ca
starband.ca
www.example316.bible
starband.ca
starband.ca
example316.bible
kudzoo.media

Certificate

The complete raw certificate details for example316.bible in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxXOz3T+nD7mraXxJqFOK
hwSBjMz1iGR1tvpQc6nMSMJPJOrTCa47rg4tlFX/egarsNbSY8odO4WIdMmyg4Jj
Alrj+39tRpJ1UsnIyCQgNdcKpObAgnnLCxeOGMzYezzBA9rOuFSWXB7TwKIwJBrx
pELPiU9m2rNE12gqVtZAr8Z0ZOBOiG39RpCktDR5jOek6yrrqJyxSjYgeLSY4ZsC
VV7xSU+oaChh2erpvSwKj7zO/iOUQMz5P/kzFR4FMCYV2+rvgtlLjBDf71OV10Sg
v2nWgHpaEFB8uN2xFvpx7vzcLlCF+5vAF6yhLrIW9NyKHOhUMPlWEbz7lvjMnF9B
ZwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 311499446794984545639630514362001738021669
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-18 06:20:50 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-18 06:20:49 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'example316.bible'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24926001154249855129179822479074288775428326951654055702010558976171682359828720205972362306043965533102763498501120388193512727364673253540517721610958307407484299415406690975645945476851600473620061531597929636157855204624305149056827928544028340528419031831318589237136378236175770784093099566631102231538795331216892602896124243287006168921784391910185261147685973391535922394542814754219607135644506596260588395867937876011900385230023115403898751564403711049796656764952772060374459114208382220256186306495770685049484497642987697793076884662434917006023799352396502630561487727245210768214899222340085078770023
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a5c9305ab13173c4f4924d6e6f024f8764becd47
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (405 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2060.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arbitrageurr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'betterseonyc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bihardental.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emanuelcounty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'example316.bible'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exercisecycles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'floridaplating.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'health-records.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ihatethispodcast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'labryn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'latinostoday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lupoalberto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oestringen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onairbar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'queertunes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'realestateguides.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seslikitap.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shortsaleutah.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sillabuss.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'themotioncapturefactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usaprecisionfirearms.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018dbb16ce5c0000040300483046022100feda0781ecb1d2d366330da2442dd73adc4b25a615cdfec607f62cf7321b5e25022100f668e6eb36083e125298da68f52c05e07cb23baee3290e1d83b4cacc29578bcf0076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018dbb16ce5d000004030047304502206b35e3f5e049baf44994942d06da6aca8e11f7f21a242817656255cfac4b9948022100cfaaa0e1b359c0490c5589f8acd34b4c98f48ff7dfb5fb20a7634e5ef126e92a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0064dd795468f1ad4b79f12f1cfe44c64567dfc8c7cfdd053d7a01f58dd04cbfbda5fc9e99141d8d0b36dd355f082aeedb9df52d8ca11fb1eeb29bb48b58e90e919d12cb1721914e78dd0512e6804f77b7e9ecf0bfda5c79a4337e5aa7b60f582679d9f4eedc51ce88758f30f0e98f9f4ffb9135f2d44ff5ed64c01bf0e91c4c2813fb46daa9805944b66e827bc34d19478d05d6f083388e007dfa08085fcb30b986dc2e1224bc5e28f804947d446ed7c2270c6fe2d841f5b78e93c81707ae050f4f6d84e62f550e2d6cd059ce5b81bb4e85880d2213b82477e223aeada251245e871ac8121bc244af34348e902a9f0e08cec842a30507ab0f9b9940ee2d940c4a