christianrecord.org

Issued by R3

About this certificate

This digital certificate with serial number 03:25:0b:42:6a:ca:fb:7d:0c:1d:3d:2b:71:0d:62:e9:6c:27 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=christianrecord.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:25:0b:42:6a:ca:fb:7d:0c:1d:3d:2b:71:0d:62:e9:6c:27
Serial Number (int): 273942271736919099186600815559731434843175
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d2:a3:f1:23:d5:aa:a5:4b:0d:d2:d2:1c:b5:5e:f6:81:bb:ae:93:a5
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 38:d0:20:ba:2a:fe:f5:75:ea:8d:05:cb:87:23:00:64:b9:ac:ba:db
Fingerprint (sha256): ed:f9:68:81:31:3c:b3:81:a7:08:74:37:1a:95:93:68:e0:57:c1:6c:2d:01:12:99:18:62:00:c5:fc:c6:9f:76

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate christianrecord.org

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for christianrecord.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

christianrecord.org
www.christianrecord.org

Other certificates including the domain name christianrecord.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for christianrecord.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgISAyULQmrK+30MHT0rcQ1i6WwnMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzAzMDgxNzAzMDBaFw0yMzA2MDYxNzAyNTlaMB4xHDAaBgNVBAMT
E2NocmlzdGlhbnJlY29yZC5vcmcwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIK
AoICAQCp8bO/q77Oj7mfrL/Ib5+EpklwnBNH/p6s0p9nfP1pLmLbcfmuBgrVy8er
q0vM04h9mk2jHB2d7jpHCCe2K05gQJ4aQHDlWJ/s6AAJUW0uifOTPYxVZysJfrdB
dX5qmSMUXhjSRdUBdEPl1+bPW3TjnrEBnJzDHb1TQp+KFiDhh7sX1TRJOPyvj6yf
O3u2WnXrk5NrQ+t7O3OZNuxxHGX9QSBSYMtSHLH9b9snQCZ2QrAicuUC5FNBaPxT
ur4uYpBLA93exAe6mD9l2b1Z7uh5dYximjoJv7sjZ5SdpCtwEps++/acfppLjPHD
Luv/bOzgds+i2A+vBCmD2/y/axE8AsgxY/xjdC6RvL7qOEOvYGWXNDHpxLjIF14B
XCl0CXHjsYeTkfvI2Bdwx//j14yFbYg3ECFEutTkxiGHeNktpDwfMQZ2niPSRN3E
6q8AJz+7WooAWcb/ORKzXvvcUerm9oQJheyyDxcTe54sfxKbMTL0GaJrl9h3u1qZ
SJcgW/kEbMIaf/zw007X66AR6gD85aF7ht8HOcdOmb5lHRQi94zauDfQrdLZBM1F
OCwbeEvU4aqa+bAI9ipLiWQWL8T/3L0sA0tVjY23+XhNrjCFJ3xFv+Yai12qid9V
rthqB+n+KEDOUAvbNF+CkDKhkx3V8Th3vwKtFeLe3Sy6cvZI/QIDAQABo4ICZjCC
AmIwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcD
AjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBTSo/Ej1aqlSw3S0hy1XvaBu66TpTAf
BgNVHSMEGDAWgBQULrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcw
IQYIKwYBBQUHMAGGFWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYW
aHR0cDovL3IzLmkubGVuY3Iub3JnLzA3BgNVHREEMDAughNjaHJpc3RpYW5yZWNv
cmQub3Jnghd3d3cuY2hyaXN0aWFucmVjb3JkLm9yZzBMBgNVHSAERTBDMAgGBmeB
DAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxl
dHNlbmNyeXB0Lm9yZzCCAQMGCisGAQQB1nkCBAIEgfQEgfEA7wB1ALc++yTfnE26
dfI5xbpY9Gxd/ELPep81xJ4dCYEl7bSZAAABhsJkCC4AAAQDAEYwRAIgfPvNAnPn
L1w7EKGLkCj6BDTEil5hYB/Pug+SnYWRsYYCICNx0Y8oi8U6n/F3hPNib3ejPuYC
lZRGcBzkp+j83d6XAHYAejKMVNi3LbYg6jjgUh7phBZwMhOFTTvSK8E6V6NS61IA
AAGGwmQIQQAABAMARzBFAiEA1zFFKu0X+s3V/mwh3FS3DvSwqBq+hoqOQ2CfdUSU
TrwCIBAGVsROWX3cGkCu+4ACA6oPkS4F9472snvE3W5DoJ/ZMA0GCSqGSIb3DQEB
CwUAA4IBAQBe71NEVFIdWfaBkCDUUKturDLPZBbf4yHe/KFMvqj6zeg8clZZvBB8
dutPZa7fTSeVj1AgfQZRUa7kyxHYyQpv2Ql+iok64mBgy08A1WRX/f3mq87SuOSc
E2K2ltS6TQV2KdZUdLEdvtiu7wmcm+1k4QGl9ypKUwy5P9Ull0HOhaF1UKYGAAPS
j/Fkic9OH1yz+2P9NSfsDJU4rbF+ODt+1oX6pUnQf8ecC+9jC9LuxoKDoLOTdoiv
wPV9v47zhoiSP9DywoJkGmM3tOwpSsdbVyQSR/esbuy6/OivFlt9Zloz6K3WGDWi
lyVH5+vhbgeXF8zFCLFsu/AuCIe13+CX
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAqfGzv6u+zo+5n6y/yG+f
hKZJcJwTR/6erNKfZ3z9aS5i23H5rgYK1cvHq6tLzNOIfZpNoxwdne46RwgntitO
YECeGkBw5Vif7OgACVFtLonzkz2MVWcrCX63QXV+apkjFF4Y0kXVAXRD5dfmz1t0
456xAZycwx29U0KfihYg4Ye7F9U0STj8r4+snzt7tlp165OTa0PreztzmTbscRxl
/UEgUmDLUhyx/W/bJ0AmdkKwInLlAuRTQWj8U7q+LmKQSwPd3sQHupg/Zdm9We7o
eXWMYpo6Cb+7I2eUnaQrcBKbPvv2nH6aS4zxwy7r/2zs4HbPotgPrwQpg9v8v2sR
PALIMWP8Y3Qukby+6jhDr2BllzQx6cS4yBdeAVwpdAlx47GHk5H7yNgXcMf/49eM
hW2INxAhRLrU5MYhh3jZLaQ8HzEGdp4j0kTdxOqvACc/u1qKAFnG/zkSs1773FHq
5vaECYXssg8XE3ueLH8SmzEy9Bmia5fYd7tamUiXIFv5BGzCGn/88NNO1+ugEeoA
/OWhe4bfBznHTpm+ZR0UIveM2rg30K3S2QTNRTgsG3hL1OGqmvmwCPYqS4lkFi/E
/9y9LANLVY2Nt/l4Ta4whSd8Rb/mGotdqonfVa7Yagfp/ihAzlAL2zRfgpAyoZMd
1fE4d78CrRXi3t0sunL2SP0CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 273942271736919099186600815559731434843175
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-08 17:03:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-06 17:02:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'christianrecord.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 693311639353264430431500926601780954234805787977481752506027968461690329973640097334302083995626639760392150299693691877120017387212182738268008986368658215038500499725454117131642015420826298671887949123036698006023890395756203310069758472414775499557838414115274409131518577270190480295137497104857396200728306324071393951617728127873307517623274473840746029267189277213884687836571456697348066855927779910213353717064346091405839144820075963624235711365758783043593716821577159477623999479036162914734573382299895616170780235296802285649933903901876283726772525390673255914297478063425429784915782436112236941097213667169235682443905952464160139470265633424630237327885234704783046568410514896036556680244122266064496112307941197461739189888315845809211594999417900660607472485010323867113625626458491294048568399832191680614623891306684849529520876565235382515119300983071095939635705894754926290725525093915187660740218720073081668803489775384458594721274944006190913825181358768683601235132214496855802608842962686695045091115784237656058040769947454054980604615106343562358028444244707184217747799868723198895170261783997897469215037665195211345689076219717061580395756095382409747304425225902346229815217997597813200433596669
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d2a3f123d5aaa54b0dd2d21cb55ef681bbae93a5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'christianrecord.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.christianrecord.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000186c264082e000004030046304402207cfbcd0273e72f5c3b10a18b9028fa0434c48a5e61601fcfba0f929d8591b18602202371d18f288bc53a9ff17784f3626f77a33ee602959446701ce4a7e8fcddde970076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000186c26408410000040300473045022100d731452aed17facdd5fe6c21dc54b70ef4b0a81abe868a8e43609f7544944ebc0220100656c44e597ddc1a40aefb800203aa0f912e05f78ef6b27bc4dd6e43a09fd9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		005eef534454521d59f6819020d450ab6eac32cf6416dfe321defca14cbea8facde83c725659bc107c76eb4f65aedf4d27958f50207d065151aee4cb11d8c90a6fd9097e8a893ae26060cb4f00d56457fdfde6abced2b8e49c1362b696d4ba4d057629d65474b11dbed8aeef099c9bed64e101a5f72a4a530cb93fd5259741ce85a17550a6060003d28ff16489cf4e1f5cb3fb63fd3527ec0c9538adb17e383b7ed685faa549d07fc79c0bef630bd2eec68283a0b3937688afc0f57dbf8ef38688923fd0f2c282641a6337b4ec294ac75b57241247f7ac6eecbafce8af165b7d665a33e8add61835a2972547e7ebe16e079717ccc508b16cbbf02e0887b5dfe097