blogroll.bible

Issued by R3

About this certificate

This digital certificate with serial number 03:3e:8e:e0:bc:57:d9:57:66:b1:a1:79:06:69:f5:3e:40:30 was issued on by Let's Encrypt.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=blogroll.bible

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:3e:8e:e0:bc:57:d9:57:66:b1:a1:79:06:69:f5:3e:40:30
Serial Number (int): 282624281814329814063832721319393058766896
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 9c:d7:ac:3a:fe:74:de:50:18:f9:10:6c:e1:9a:06:76:05:01:75:6b
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 67:07:ce:8a:c7:27:fe:1b:26:38:33:8c:0a:e6:60:b1:19:01:91:4f
Fingerprint (sha256): f8:ca:41:49:68:68:8c:fc:e3:a7:44:c3:aa:99:06:c5:d7:31:4e:98:83:28:91:a5:54:89:75:07:94:a7:c0:ea

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate blogroll.bible

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for blogroll.bible

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

andrewbernard.org
blogroll.bible
lerecipes.com
lgbtvancouver.com

Other certificates including the domain name blogroll.bible

(limited to 100 certificates)
blogroll.bible
papisgirls.ca
worldventures.com.vc
miami.world
comicbook.bible
omeiapad.world
miami.world
anselmacademic.bible
worldventures.com.vc
worldventures.com.vc
qza.co.za
blogroll.bible
worldventures.com.vc
neurolab.world
blogroll.bible
blogroll.bible
blogroll.bible
omeiapad.world
worldventures.com.vc
worldventures.com.vc
blogroll.bible
papisgirls.ca
blogroll.bible

Certificate

The complete raw certificate details for blogroll.bible in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4RTHbV7FDQw+hOWOUKxE
I/+fmQ4Ajt4QxOMw8l5rFnPd0MycyrRUulid69zNHr8CdXt0VYHe4uH+fTLh1kMW
IRZXewe6DBmI1v7wvECQ8FR+GsMmEjkc6kIqz7fACcIvx7rC/TAPDGjwV5oV97K9
chyWGcqNSkj1xYXH5yO1ErWMpMU7rdQ5eP2h8D7exVk1mYvpkWWgw8lFjSLKskXc
u5cS7PXGm2Sdwp5Q2m/FsX/HmjR74bNJH2L9Fg+frPDNRmb+HaDTNZR64anMpeY0
xqwIXxvcNqoGG0HMezrjwR+n+b1pBrCelLmw5HyFcI6thgSsO+uG9uMgTTMWEJZU
wwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 282624281814329814063832721319393058766896
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-20 12:23:35 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-20 12:23:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'blogroll.bible'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28413865130372335290058190851530472068565032690216039993293571564449547697212887260755927128629352311062830158601617896004009101292698661020915815355749028127006553233856145881905971724287268022628038860317056493263754013247102173679369685495782959645437255259986740516994787261941793590660771709399160729667354555224946010969421649342330269266119485833403193829816772652664671919219006097250760982814993129715148574633620731607119693587134952238155735826152247848617566059020015636676112649203809692220741028321307082366012935458874737848903225039000835137558099068277871585511483282507238875933755858713793688655043
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9cd7ac3afe74de5018f9106ce19a06760501756b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (71 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'andrewbernard.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blogroll.bible'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lerecipes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lgbtvancouver.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018dc6afa3dd0000040300483046022100f8d92c1100d44dc382b6678cd62bb28705c47f62c6be4b64cd3b9f72a9c5c910022100cbc03abddcc8b4e57e241844fa026119c5646e698e8927f080b9dd69c4df6c29007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018dc6afa5e80000040300473045022100ad06a16f9821af14a2e6a150905501df6037c4f4490f1e01fcbbbc1cb59df57202204cb7a6adccb3ca5e817b685dc73d314dd8b49839c0bc672f6e28453c09ee9337
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0024539257cd480945bc33e3bb063dca89c1180e08297a743c4f0f820274bb8632963990d3c83edd41958dd094f6903f758b236d3d93fbb57d237075473a93c19d3948f506a9b5313aba148df9564c700b5059a923d4073659c963c48a151740bc4472937a25119e5acf650adb6972362d2e32b1dfd416dbc9ab45c65a96b4ab34372737de5048aefaad074979d13f8cd2f15c6c96e066d7d4da67efb762f17e638c1ba5454e07b4af410f6058324dc9b7883306e79e58d8f5100cdbec0548fedd7a0f467de2b51553301333512ae49bba564c97dac6b777a36d6251c8cdf1945383d9656c107246abfcdb7123b96a916e09bf94c601c698dd9072890d88fe166a