christianrecord.org
Issued by R3
About this certificate
This digital certificate with serial number 03:25:0b:42:6a:ca:fb:7d:0c:1d:3d:2b:71:0d:62:e9:6c:27 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=christianrecord.org
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:25:0b:42:6a:ca:fb:7d:0c:1d:3d:2b:71:0d:62:e9:6c:27Serial Number (int): 273942271736919099186600815559731434843175
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: d2:a3:f1:23:d5:aa:a5:4b:0d:d2:d2:1c:b5:5e:f6:81:bb:ae:93:a5
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 38:d0:20:ba:2a:fe:f5:75:ea:8d:05:cb:87:23:00:64:b9:ac:ba:db
Fingerprint (sha256): ed:f9:68:81:31:3c:b3:81:a7:08:74:37:1a:95:93:68:e0:57:c1:6c:2d:01:12:99:18:62:00:c5:fc:c6:9f:76
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate christianrecord.org
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for christianrecord.org
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
christianrecord.org
www.christianrecord.org
www.christianrecord.org
Other certificates including the domain name christianrecord.org
(limited to 100 certificates)
christianrecord.org
christianrecord.org
christianrecord.org
christianrecord.org
www.christianrecord.org
christianrecord.org
christianrecord.org
christianrecord.org
christianrecord.org
www.christianrecord.org
christianrecord.org
earth.christianrecord.com
christianrecord.org
christianrecord.org
christianrecord.org
christianrecord.org
christianrecord.org
christianrecord.org
www.christianrecord.org
christianrecord.org
christianrecord.org
christianrecord.org
christianrecord.org
www.christianrecord.org
christianrecord.org
christianrecord.org
christianrecord.org
christianrecord.org
christianrecord.org
www.christianrecord.org
earth.christianrecord.com
christianrecord.org
christianrecord.org
www.christianrecord.org
christianrecord.org
christianrecord.org
christianrecord.org
www.christianrecord.org
christianrecord.org
christianrecord.org
christianrecord.org
christianrecord.org
www.christianrecord.org
christianrecord.org
earth.christianrecord.com
christianrecord.org
christianrecord.org
christianrecord.org
christianrecord.org
christianrecord.org
christianrecord.org
www.christianrecord.org
christianrecord.org
christianrecord.org
christianrecord.org
christianrecord.org
www.christianrecord.org
christianrecord.org
christianrecord.org
christianrecord.org
christianrecord.org
christianrecord.org
www.christianrecord.org
earth.christianrecord.com
christianrecord.org
christianrecord.org
www.christianrecord.org
Certificate
The complete raw certificate details for christianrecord.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgISAyULQmrK+30MHT0rcQ1i6WwnMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzAzMDgxNzAzMDBaFw0yMzA2MDYxNzAyNTlaMB4xHDAaBgNVBAMT E2NocmlzdGlhbnJlY29yZC5vcmcwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIK AoICAQCp8bO/q77Oj7mfrL/Ib5+EpklwnBNH/p6s0p9nfP1pLmLbcfmuBgrVy8er q0vM04h9mk2jHB2d7jpHCCe2K05gQJ4aQHDlWJ/s6AAJUW0uifOTPYxVZysJfrdB dX5qmSMUXhjSRdUBdEPl1+bPW3TjnrEBnJzDHb1TQp+KFiDhh7sX1TRJOPyvj6yf O3u2WnXrk5NrQ+t7O3OZNuxxHGX9QSBSYMtSHLH9b9snQCZ2QrAicuUC5FNBaPxT ur4uYpBLA93exAe6mD9l2b1Z7uh5dYximjoJv7sjZ5SdpCtwEps++/acfppLjPHD Luv/bOzgds+i2A+vBCmD2/y/axE8AsgxY/xjdC6RvL7qOEOvYGWXNDHpxLjIF14B XCl0CXHjsYeTkfvI2Bdwx//j14yFbYg3ECFEutTkxiGHeNktpDwfMQZ2niPSRN3E 6q8AJz+7WooAWcb/ORKzXvvcUerm9oQJheyyDxcTe54sfxKbMTL0GaJrl9h3u1qZ SJcgW/kEbMIaf/zw007X66AR6gD85aF7ht8HOcdOmb5lHRQi94zauDfQrdLZBM1F OCwbeEvU4aqa+bAI9ipLiWQWL8T/3L0sA0tVjY23+XhNrjCFJ3xFv+Yai12qid9V rthqB+n+KEDOUAvbNF+CkDKhkx3V8Th3vwKtFeLe3Sy6cvZI/QIDAQABo4ICZjCC AmIwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcD AjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBTSo/Ej1aqlSw3S0hy1XvaBu66TpTAf BgNVHSMEGDAWgBQULrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcw IQYIKwYBBQUHMAGGFWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYW aHR0cDovL3IzLmkubGVuY3Iub3JnLzA3BgNVHREEMDAughNjaHJpc3RpYW5yZWNv cmQub3Jnghd3d3cuY2hyaXN0aWFucmVjb3JkLm9yZzBMBgNVHSAERTBDMAgGBmeB DAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxl dHNlbmNyeXB0Lm9yZzCCAQMGCisGAQQB1nkCBAIEgfQEgfEA7wB1ALc++yTfnE26 dfI5xbpY9Gxd/ELPep81xJ4dCYEl7bSZAAABhsJkCC4AAAQDAEYwRAIgfPvNAnPn L1w7EKGLkCj6BDTEil5hYB/Pug+SnYWRsYYCICNx0Y8oi8U6n/F3hPNib3ejPuYC lZRGcBzkp+j83d6XAHYAejKMVNi3LbYg6jjgUh7phBZwMhOFTTvSK8E6V6NS61IA AAGGwmQIQQAABAMARzBFAiEA1zFFKu0X+s3V/mwh3FS3DvSwqBq+hoqOQ2CfdUSU TrwCIBAGVsROWX3cGkCu+4ACA6oPkS4F9472snvE3W5DoJ/ZMA0GCSqGSIb3DQEB CwUAA4IBAQBe71NEVFIdWfaBkCDUUKturDLPZBbf4yHe/KFMvqj6zeg8clZZvBB8 dutPZa7fTSeVj1AgfQZRUa7kyxHYyQpv2Ql+iok64mBgy08A1WRX/f3mq87SuOSc E2K2ltS6TQV2KdZUdLEdvtiu7wmcm+1k4QGl9ypKUwy5P9Ull0HOhaF1UKYGAAPS j/Fkic9OH1yz+2P9NSfsDJU4rbF+ODt+1oX6pUnQf8ecC+9jC9LuxoKDoLOTdoiv wPV9v47zhoiSP9DywoJkGmM3tOwpSsdbVyQSR/esbuy6/OivFlt9Zloz6K3WGDWi lyVH5+vhbgeXF8zFCLFsu/AuCIe13+CX -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAqfGzv6u+zo+5n6y/yG+f hKZJcJwTR/6erNKfZ3z9aS5i23H5rgYK1cvHq6tLzNOIfZpNoxwdne46RwgntitO YECeGkBw5Vif7OgACVFtLonzkz2MVWcrCX63QXV+apkjFF4Y0kXVAXRD5dfmz1t0 456xAZycwx29U0KfihYg4Ye7F9U0STj8r4+snzt7tlp165OTa0PreztzmTbscRxl /UEgUmDLUhyx/W/bJ0AmdkKwInLlAuRTQWj8U7q+LmKQSwPd3sQHupg/Zdm9We7o eXWMYpo6Cb+7I2eUnaQrcBKbPvv2nH6aS4zxwy7r/2zs4HbPotgPrwQpg9v8v2sR PALIMWP8Y3Qukby+6jhDr2BllzQx6cS4yBdeAVwpdAlx47GHk5H7yNgXcMf/49eM hW2INxAhRLrU5MYhh3jZLaQ8HzEGdp4j0kTdxOqvACc/u1qKAFnG/zkSs1773FHq 5vaECYXssg8XE3ueLH8SmzEy9Bmia5fYd7tamUiXIFv5BGzCGn/88NNO1+ugEeoA /OWhe4bfBznHTpm+ZR0UIveM2rg30K3S2QTNRTgsG3hL1OGqmvmwCPYqS4lkFi/E /9y9LANLVY2Nt/l4Ta4whSd8Rb/mGotdqonfVa7Yagfp/ihAzlAL2zRfgpAyoZMd 1fE4d78CrRXi3t0sunL2SP0CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 273942271736919099186600815559731434843175 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-08 17:03:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-06 17:02:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'christianrecord.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 693311639353264430431500926601780954234805787977481752506027968461690329973640097334302083995626639760392150299693691877120017387212182738268008986368658215038500499725454117131642015420826298671887949123036698006023890395756203310069758472414775499557838414115274409131518577270190480295137497104857396200728306324071393951617728127873307517623274473840746029267189277213884687836571456697348066855927779910213353717064346091405839144820075963624235711365758783043593716821577159477623999479036162914734573382299895616170780235296802285649933903901876283726772525390673255914297478063425429784915782436112236941097213667169235682443905952464160139470265633424630237327885234704783046568410514896036556680244122266064496112307941197461739189888315845809211594999417900660607472485010323867113625626458491294048568399832191680614623891306684849529520876565235382515119300983071095939635705894754926290725525093915187660740218720073081668803489775384458594721274944006190913825181358768683601235132214496855802608842962686695045091115784237656058040769947454054980604615106343562358028444244707184217747799868723198895170261783997897469215037665195211345689076219717061580395756095382409747304425225902346229815217997597813200433596669 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) d2a3f123d5aaa54b0dd2d21cb55ef681bbae93a5 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'christianrecord.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.christianrecord.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000186c264082e000004030046304402207cfbcd0273e72f5c3b10a18b9028fa0434c48a5e61601fcfba0f929d8591b18602202371d18f288bc53a9ff17784f3626f77a33ee602959446701ce4a7e8fcddde970076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000186c26408410000040300473045022100d731452aed17facdd5fe6c21dc54b70ef4b0a81abe868a8e43609f7544944ebc0220100656c44e597ddc1a40aefb800203aa0f912e05f78ef6b27bc4dd6e43a09fd9 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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