goodfitcoaching.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:98:4d:db:1c:e9:f4:78:e4:12:05:90:20:d4:64:9b:9f:97 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=goodfitcoaching.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:98:4d:db:1c:e9:f4:78:e4:12:05:90:20:d4:64:9b:9f:97Serial Number (int): 313163265822394135294366004985722337730455
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 09:d2:b3:e1:b5:06:7e:69:f4:78:56:02:8b:f8:20:7a:06:ad:28:4a
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 13:b6:8c:8d:a3:e2:8b:fe:eb:c1:95:b2:81:0b:ee:42:34:9a:81:22
Fingerprint (sha256): 00:bb:46:a5:76:a0:f1:c8:6a:76:da:17:ad:3b:fc:d4:18:27:42:75:b3:2c:79:ed:48:ca:1f:08:22:20:9b:1d
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate goodfitcoaching.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for goodfitcoaching.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
goodfitcoaching.com
www.goodfitcoaching.com
www.goodfitcoaching.com
Other certificates including the domain name goodfitcoaching.com
(limited to 100 certificates)
goodfitcoaching.com
goodfitcoaching.com
*.picsbypaula.com
web13.tigertech.biz
web13.tigertech.biz
goodfitcoaching.com
web13.tigertech.biz
*.reformandride.com
*.reformandride.com
web13.tigertech.biz
goodfitcoaching.com
goodfitcoaching.com
goodfitcoaching.com
*.goodfitcoaching.com
*.goodfitcoaching.com
goodfitcoaching.com
web13.tigertech.biz
*.reformandride.com
web13.tigertech.biz
web13.tigertech.biz
goodfitcoaching.com
goodfitcoaching.com
*.goodfitcoaching.com
goodfitcoaching.com
goodfitcoaching.com
*.picsbypaula.com
web13.tigertech.biz
web13.tigertech.biz
goodfitcoaching.com
web13.tigertech.biz
*.reformandride.com
*.reformandride.com
web13.tigertech.biz
goodfitcoaching.com
goodfitcoaching.com
goodfitcoaching.com
*.goodfitcoaching.com
*.goodfitcoaching.com
goodfitcoaching.com
web13.tigertech.biz
*.reformandride.com
web13.tigertech.biz
web13.tigertech.biz
goodfitcoaching.com
goodfitcoaching.com
*.goodfitcoaching.com
goodfitcoaching.com
Certificate
The complete raw certificate details for goodfitcoaching.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgISA5hN2xzp9HjkEgWQINRkm5+XMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTExMjQwOTE5MjhaFw0y MDAyMjIwOTE5MjhaMB4xHDAaBgNVBAMTE2dvb2RmaXRjb2FjaGluZy5jb20wggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJcntS1PY75esko2YuQ6XQmjmG 09S0zIF1p8OhXX//QMWSx2qMy9lxis32fNRL+07rEh0s+cRBxl63d+RmvJqNNL7V gmB9D7PobXbfI8nyo7DS4d1JaLaejycqz3nlJE4ZcMvmOWToikXDfQVSrXEq6iL6 lKwj4kkT4uubaDqQS+cFQ9BqoYHeyxLhLUp7HP7PbjkfDKSm8jiU0crNhDQb0e7X GEyBaPPoGO7TM2xLCh7rJ7dOqNA1sZ77yi3TBRhuDFeP/ejzT3Hx2CnW6B9IKT8i NTXRSy3atZPbFh0Q6cDrp3ZhVXvl6NCzKXrvoU2x4DdQUVSqjx/169SCNRL3AgMB AAGjggKDMIICfzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEG CCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFAnSs+G1Bn5p9HhWAov4 IHoGrShKMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsGAQUF BwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNlbmNy eXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNy eXB0Lm9yZy8wNwYDVR0RBDAwLoITZ29vZGZpdGNvYWNoaW5nLmNvbYIXd3d3Lmdv b2RmaXRjb2FjaGluZy5jb20wTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC 3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcw ggEGBgorBgEEAdZ5AgQCBIH3BIH0APIAdwBep3P531bA57U2SH3QSeAyepGaDISh EhKEGHWWgXFFWAAAAW6c7GUcAAAEAwBIMEYCIQCBPttGZZy/XZhAcRtXGHS6gtDH ZFhAbjliW8mXCqrE2wIhAJwnrdCW7jLcFt8p0Ps3xuGgcS8L6BAyH5rx5hrGdZX8 AHcAsh4FzIuizYogTodm+Su5iiUgZ2va+nDnsklTLe+LkF4AAAFunOxlFAAABAMA SDBGAiEAuzj3AaCw4zGlfFkvsLsmJ2urnol0wFxsFrvREku5l4QCIQDMrmK/lR3W TxV3vp30L0mASi0N2QflvSl2nDp9Tyh0eDANBgkqhkiG9w0BAQsFAAOCAQEAfZEZ pKWg9bOkj3eLhMUkcumKkIVxBzZWvmeDdRaww36sVgxKv+/S8g8J5//6UDrboNHT qvB+KxHs3Jh6rLImn2REDdm1Fc4oUx46DTgcYjHD3bN4P3e3efz2PPTf+v/p+5Va 8zGzPTl4V/TpgN+rxx/LEXxgHddEYrQOdJ4O955NNUSZX21Ueg526DZkTpWsFdNh bsyhp6OEBSUB7t8XSbWS6lWJfUacQjRWN0Cd6hOdntHrf8eiXSt7p8WAlbuO5e9L kq4ptCI56pf1ArW8kwS0PZkhdrU1JOktdGN3yrRlb2uQZeklYMDRyq3oKa3vhVz8 wGJW98EpAecp4oLdFA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyXJ7UtT2O+XrJKNmLkOl 0Jo5htPUtMyBdafDoV1//0DFksdqjMvZcYrN9nzUS/tO6xIdLPnEQcZet3fkZrya jTS+1YJgfQ+z6G123yPJ8qOw0uHdSWi2no8nKs955SROGXDL5jlk6IpFw30FUq1x Kuoi+pSsI+JJE+Lrm2g6kEvnBUPQaqGB3ssS4S1Kexz+z245HwykpvI4lNHKzYQ0 G9Hu1xhMgWjz6Bju0zNsSwoe6ye3TqjQNbGe+8ot0wUYbgxXj/3o809x8dgp1ugf SCk/IjU10Ust2rWT2xYdEOnA66d2YVV75ejQsyl676FNseA3UFFUqo8f9evUgjUS 9wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 313163265822394135294366004985722337730455 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-24 09:19:28 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-22 09:19:28 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'goodfitcoaching.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25430352344588362867417807285816223041292919716161310831197438552121098973696995871509197194803735483884372395004735968873448643494330023217493981622836615407753365554567446467116770945236130966924555218316318052371797966410731288482289131932116777873565225180754532974511011306623620604754446938286272855217006686059250106964104451521988776871698729991566343183520741301732880842696440900432931026927454300678527400247371831959148778568115391229499652287910702102420678000258796103944161101925827708326237212051275377737632572226254376048509553209549803078528806546565428649650337505195270988915462876683308134372087 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 09d2b3e1b5067e69f47856028bf8207a06ad284a . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goodfitcoaching.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.goodfitcoaching.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) 00f20077005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016e9cec651c0000040300483046022100813edb46659cbf5d9840711b571874ba82d0c76458406e39625bc9970aaac4db0221009c27add096ee32dc16df29d0fb37c6e1a0712f0be810321f9af1e61ac67595fc007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016e9cec65140000040300483046022100bb38f701a0b0e331a57c592fb0bb26276bab9e8974c05c6c16bbd1124bb99784022100ccae62bf951dd64f1577be9df42f49804a2d0dd907e5bd29769c3a7d4f287478 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 007d9119a4a5a0f5b3a48f778b84c52472e98a908571073656be67837516b0c37eac560c4abfefd2f20f09e7fffa503adba0d1d3aaf07e2b11ecdc987aacb2269f64440dd9b515ce28531e3a0d381c6231c3ddb3783f77b779fcf63cf4dffaffe9fb955af331b33d397857f4e980dfabc71fcb117c601dd74462b40e749e0ef79e4d3544995f6d547a0e76e836644e95ac15d3616ecca1a7a384052501eedf1749b592ea55897d469c42345637409dea139d9ed1eb7fc7a25d2b7ba7c58095bb8ee5ef4b92ae29b42239ea97f502b5bc9304b43d992176b53524e92d746377cab4656f6b9065e92560c0d1caade829adef855cfcc06256f7c12901e729e282dd14