precepts4living.org

Issued by R3

About this certificate

This digital certificate with serial number 03:9f:8f:db:c9:3f:98:46:13:6c:b7:02:07:2b:38:29:57:4a was issued on by Let's Encrypt.

With 12 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=precepts4living.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:9f:8f:db:c9:3f:98:46:13:6c:b7:02:07:2b:38:29:57:4a
Serial Number (int): 315632974933922048738039178278869486098250
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 28:5c:65:2b:13:88:10:34:90:a1:4f:44:04:3d:e0:1f:5e:f6:38:0b
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 97:3a:a8:f4:9c:1a:21:91:fb:e4:ad:70:f4:c5:ca:e7:9e:7c:c9:fb
Fingerprint (sha256): f8:0c:8f:5f:4b:3f:95:a1:6d:a8:67:11:ee:c3:69:ff:16:27:6b:c7:e2:e0:13:97:f7:6d:2b:78:49:c0:83:ff

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate precepts4living.org

12

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for precepts4living.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

achaeans.com
cbdworldwide.com
crowtheraudio.com
decarbonisemyhome.com.au
inkomst.com
metautilitylocator.com
modernbritishspares.net
pinehurstproperty.com
precepts4living.org
topsanantoniolawyers.com
usarockandroll.com
wpvps.in

Other certificates including the domain name precepts4living.org

(limited to 100 certificates)
blood.vc
cng.world
precepts4living.org
modalatmaintowns.ca
furcel.club
precepts4living.org
pet.clinic
precepts4living.org
5272653.ca
precepts4living.org
5272653.ca
musicoldies.ca
5272653.ca
schoolcateringequipment.com.sanm.co.za
precepts4living.org
musicoldies.ca
tempt.com.rheast.llc
musicoldies.ca
musicoldies.ca
audio.bible
musicoldies.ca
precepts4living.org
precepts4living.org
musicoldies.ca
musicoldies.ca
5272653.ca
precepts4living.org
precepts4living.org
5272653.ca
musicoldies.ca
art.estate
realestateowned.org
precepts4living.org
precepts4living.org
musicoldies.ca

Certificate

The complete raw certificate details for precepts4living.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIF0jCCBLqgAwIBAgISA5+P28k/mEYTbLcCBys4KVdKMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDAyMTkwNzQyNDFaFw0yNDA1MTkwNzQyNDBaMB4xHDAaBgNVBAMT
E3ByZWNlcHRzNGxpdmluZy5vcmcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDSlTj1TbbR69R61Og57TGMDUd9jA7UQasIAZLliPzmD3/IEfJRapiHXjmK
KhPR3TRudHDd4frewraFKp+bn8pvmzCMIK7a53ttTpDagEg+EDjXiW4rjCmiNO5M
Z7FP5BALeqDO93I9y5/7Tseb33A/I3WomDfNhubct6RZl0dmwVdUrPKMET32dI9N
YsKXJITgkqUH3zaPWNQOE+iIz27oXWP2Temq8FTfymYsnJKvSXnw2ku6YMTGqSAO
4kuMgTyEKlnFJ3poHOnAICO+lVM6VTavFuFy7wWR/1l5RaV+ba93u/kJUtykSqAp
ToNz2oskjI1drpeFM93U1+x1yfFtAgMBAAGjggL0MIIC8DAOBgNVHQ8BAf8EBAMC
BaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAw
HQYDVR0OBBYEFChcZSsTiBA0kKFPRAQ94B9e9jgLMB8GA1UdIwQYMBaAFBQusxe3
WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0
cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5j
ci5vcmcvMIH6BgNVHREEgfIwge+CDGFjaGFlYW5zLmNvbYIQY2Jkd29ybGR3aWRl
LmNvbYIRY3Jvd3RoZXJhdWRpby5jb22CGGRlY2FyYm9uaXNlbXlob21lLmNvbS5h
dYILaW5rb21zdC5jb22CFm1ldGF1dGlsaXR5bG9jYXRvci5jb22CF21vZGVybmJy
aXRpc2hzcGFyZXMubmV0ghVwaW5laHVyc3Rwcm9wZXJ0eS5jb22CE3ByZWNlcHRz
NGxpdmluZy5vcmeCGHRvcHNhbmFudG9uaW9sYXd5ZXJzLmNvbYISdXNhcm9ja2Fu
ZHJvbGwuY29tggh3cHZwcy5pbjATBgNVHSAEDDAKMAgGBmeBDAECATCCAQYGCisG
AQQB1nkCBAIEgfcEgfQA8gB3AEiw42vapkc0D+VqAvqdMOscUgHLVt0sgdm7v6s5
2IRzAAABjcCIGpUAAAQDAEgwRgIhAKNWn+wdjbMIKIUV9ABNbUjkpZtt0gscNuT+
qAI+2jK7AiEAxM9tBqtGEWVkRYJQ7Mi9Pr4G9oD7l8P8RduwdqUkab8AdwB2/4g/
Crb7lVHCYcz1h7o0tKTNuyncaEIKn+ZnTFo6dAAAAY3AiBsjAAAEAwBIMEYCIQC2
I072oQy3kp2AHb2/bgrWdqMK4bwWgfEHAyGYoHAKpQIhALqFIk7Ij4bcwlsIdkmD
yn3lkQ8Mw+TaZwt7o5rDjn9tMA0GCSqGSIb3DQEBCwUAA4IBAQCD0aPXdVBr+Byj
AVtZamQpTVtjxBr13Y7F14Gtp5uQmE/L69fS6fdPOtyR1M0O4vFwZVEZjhdmPb+a
Xc23wbtANLjk53rXmbHH3tV96x98H17sz3WcmxyuEn7Cpxiq2eVcUhlaKqTct124
OepvSZnlB/sz27exGYWwNaj6ytxZo/RKVozBg+uKqCDsIjVw4rMoQ3XLWld0nZwK
rQydJj9LkIKWOHK0g8fVDYz+De4IbXesmQILM69cDoSgW5FpdugxA4kktfeLZm1y
jv2k1sLb7UjYwknksk+JKGC1LMxxc7Za+vWTnAVsHw4ed78EgdwsXf6gSJHGh3X/
ID2T8txX
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0pU49U220evUetToOe0x
jA1HfYwO1EGrCAGS5Yj85g9/yBHyUWqYh145iioT0d00bnRw3eH63sK2hSqfm5/K
b5swjCCu2ud7bU6Q2oBIPhA414luK4wpojTuTGexT+QQC3qgzvdyPcuf+07Hm99w
PyN1qJg3zYbm3LekWZdHZsFXVKzyjBE99nSPTWLClySE4JKlB982j1jUDhPoiM9u
6F1j9k3pqvBU38pmLJySr0l58NpLumDExqkgDuJLjIE8hCpZxSd6aBzpwCAjvpVT
OlU2rxbhcu8Fkf9ZeUWlfm2vd7v5CVLcpEqgKU6Dc9qLJIyNXa6XhTPd1Nfsdcnx
bQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 315632974933922048738039178278869486098250
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-19 07:42:41 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-19 07:42:40 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'precepts4living.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26583628396714513590435777532814438197197666584172669991580108844119383504983313743967040546957055106950196606881946945736113615710879841561564362535156765150529883695388531850997656952324563855704061155203057822185933812529294073924226523337527014586561353217735076404963349799746021841747032354182750224634425410837687703378320865268739256270888434429126866128825644710520451494566008865279394070113403635266553853782531139528071283213585839576926998644477123671031550804334066381916487740482338614197126887220532777741853000354312430422267929347327417894721453312035903470255201311264229721989343274684685587444077
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							285c652b1388103490a14f44043de01f5ef6380b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'achaeans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbdworldwide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crowtheraudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'decarbonisemyhome.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inkomst.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metautilitylocator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'modernbritishspares.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pinehurstproperty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'precepts4living.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'topsanantoniolawyers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usarockandroll.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wpvps.in'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f200770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018dc0881a950000040300483046022100a3569fec1d8db308288515f4004d6d48e4a59b6dd20b1c36e4fea8023eda32bb022100c4cf6d06ab46116564458250ecc8bd3ebe06f680fb97c3fc45dbb076a52469bf00770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018dc0881b230000040300483046022100b6234ef6a10cb7929d801dbdbf6e0ad676a30ae1bc1681f107032198a0700aa5022100ba85224ec88f86dcc25b08764983ca7de5910f0cc3e4da670b7ba39ac38e7f6d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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