42684.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:d1:d3:af:8f:58:cb:34:c2:8d:0f:93:48:55:65:49:d3:b1 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=42684.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d1:d3:af:8f:58:cb:34:c2:8d:0f:93:48:55:65:49:d3:b1
Serial Number (int): 332737251148237280511056383841139297997745
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 68:0b:ef:f1:de:17:3e:f8:5f:bf:f9:32:d3:fe:2b:cf:6f:97:33:cd
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 9d:ff:e9:de:89:a1:b1:20:6e:6a:17:e6:d3:70:99:82:96:be:af:2f
Fingerprint (sha256): 00:ea:5d:10:3a:ef:44:f4:ba:80:b2:72:2e:0a:ba:fd:ca:78:04:1d:34:13:af:b5:da:3a:1a:be:99:d6:6e:f5

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate 42684.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for 42684.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

42684.com

Other certificates including the domain name 42684.com

(limited to 100 certificates)
42684.com
42684.com
internet.creditcard
www.42684.com
42684.com
www.42684.com
www.42405.com
34804.com
42684.com
www.keech.boston
hwl.asia
www.42684.com
42684.com
www.42684.com
42684.com
www.42945.com

Certificate

The complete raw certificate details for 42684.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGSjCCBTKgAwIBAgISA9HTr49YyzTCjQ+TSFVlSdOxMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA1MjgwNDAzMzNaFw0x
OTA4MjYwNDAzMzNaMBQxEjAQBgNVBAMTCTQyNjg0LmNvbTCCAiIwDQYJKoZIhvcN
AQEBBQADggIPADCCAgoCggIBALPu4/qKpORizOPBce43IK8FGClBrd/BTLiAkpWQ
3+OYsCrcTD5s/hFOVfC21Rm/9HzJcInrlddXck9PohJfXmOy4amPvCFk5SqhgWIQ
VZGYkC6f0fwfbtz8sSO14zN3LADNxzeLjfI6rRy4ieyPSiB9iVj/5mYq4xiVcgy1
qFDs1B7u6yHiCzDPglleyaCy8XOWPe2JyXlrZUPlSyZB4cxpgANjK7MdmGMJjoi6
zr27Je04202Qfivz56O8hw8Gt22Nb21ze5JocIt67Ztqo/Bx5jdTTB18wJkWStw6
EA+hE9xqdKj3Ox6cPBxX1Af9ft2MrI3A9mhb0E641sQarJknHwQSC1SObrJy6Rv3
3AwY/wlB/eQblQ5ev7jYr9M4zPmiJHqrmoc/L0l2Wa7Xogmjl/MESwmYi7sGo6T6
5CVgzhUWoPNAnZdl/qhWDVieqiQO74fvWbfwizCmtDeHgNcu7k4LNexJnPkcfG8Q
B+VGitDaRFZFt58Zud6Li4bFczuFEKvcaKCKR8C0yTO2+S9oO54vqAfpqmUApAgw
r4Vxvc5NcZpxt5udN4/8GWTpmifIZHFekapSFFCJw38bm57AXRMAIwgQrZw4oCIA
vjn3f15ZPDj0JbSX1pUSzwzaSMdBC2b7tt1v2iG6Au+mm0Z7h4A4F9bXu3m96hh8
kzgpAgMBAAGjggJeMIICWjAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYB
BQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFGgL7/HeFz74
X7/5MtP+K89vlzPNMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8G
CCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxl
dHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxl
dHNlbmNyeXB0Lm9yZy8wFAYDVR0RBA0wC4IJNDI2ODQuY29tMEwGA1UdIARFMEMw
CAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9j
cHMubGV0c2VuY3J5cHQub3JnMIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDwAHYA4mlL
ribo6UAJ6IYbtjuD1D7n/nSI+6SPKJMBnd3x2/4AAAFq/NJ56QAABAMARzBFAiAk
q1Kx10T0AVabtsGPjQ9ml/pXUu+OkzHYK7MrxdxVJwIhAIigGl7ifVxqgkoTvxDm
WdNv3nbzTLHJigekTKYyGeDBAHYAKTxRllTIOWW6qlD8WAfUt2+/WHopctykwwz0
5UVH9HgAAAFq/NJ7pAAABAMARzBFAiAHlcWglOTXJlzzLP0wUphCo8+Cpn/2jaJk
YSPXsKakxQIhAKSP9fFTQVyup0R1bVTXJ+6gL2dGO7a825RZ5i3Fv2f9MA0GCSqG
SIb3DQEBCwUAA4IBAQBxnR3daBzG/6fgs476fSlxxoeLlp+bjvg9OBj+feDtx6it
l5LRg6FWxBYZF81GruH00GEDKX9viK4vs3d0AkFRwo6+OjKTVPLlIvOI4sHYSrUe
9coW0FaUy4uajhtRs2koJqnIB9UtEHFg/k+tcDNdVBeMxOnlA9fOiHw0AOgHbxws
WdJdwaK+143YSP8srMkAQ89h8KuZ0Ij4PHSwkFXhO5246s2E4dB4npddKZSPmma/
6YiYuvfLa6Z8tV8wqZktGFHs7zi/oSoZbYr83ldg/+wMUSHBzKyGT4RA3UjqtXC8
mJRjPygUWKO3wUzf7//+mbQsVZnxKSbMAa5z00ds
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAs+7j+oqk5GLM48Fx7jcg
rwUYKUGt38FMuICSlZDf45iwKtxMPmz+EU5V8LbVGb/0fMlwieuV11dyT0+iEl9e
Y7LhqY+8IWTlKqGBYhBVkZiQLp/R/B9u3PyxI7XjM3csAM3HN4uN8jqtHLiJ7I9K
IH2JWP/mZirjGJVyDLWoUOzUHu7rIeILMM+CWV7JoLLxc5Y97YnJeWtlQ+VLJkHh
zGmAA2Mrsx2YYwmOiLrOvbsl7TjbTZB+K/Pno7yHDwa3bY1vbXN7kmhwi3rtm2qj
8HHmN1NMHXzAmRZK3DoQD6ET3Gp0qPc7Hpw8HFfUB/1+3YysjcD2aFvQTrjWxBqs
mScfBBILVI5usnLpG/fcDBj/CUH95BuVDl6/uNiv0zjM+aIkequahz8vSXZZrtei
CaOX8wRLCZiLuwajpPrkJWDOFRag80Cdl2X+qFYNWJ6qJA7vh+9Zt/CLMKa0N4eA
1y7uTgs17Emc+Rx8bxAH5UaK0NpEVkW3nxm53ouLhsVzO4UQq9xooIpHwLTJM7b5
L2g7ni+oB+mqZQCkCDCvhXG9zk1xmnG3m503j/wZZOmaJ8hkcV6RqlIUUInDfxub
nsBdEwAjCBCtnDigIgC+Ofd/Xlk8OPQltJfWlRLPDNpIx0ELZvu23W/aIboC76ab
RnuHgDgX1te7eb3qGHyTOCkCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 332737251148237280511056383841139297997745
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-28 04:03:33 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-26 04:03:33 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '42684.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 734063274040437877317042941498471393535146542921357823850492836155804549770924280359319449060270434086619161372908479573484476720994403285906573315071775948734224156232931561848943022076644627002392213246281901109617691045653586251934617234951353208658093778184838266209921483952755181689558356993399740419541026314838797028361908658291244529809977160222598628965361452183864558881361251353302565275540547595893425515013536051181318876984880677309226525029493358300962381964560540429831118978419981684680841959588380031218332846939026650467341699361903155148297804690806811320689498049821051382149513947898661559104311448871446827994632850507147926119558102893753639076218485644934748431280417620674430488764434800362911663744401891689108328374325772429596321210899510424046740883896247766805487056534361057822985388760814648608013069627906579003367352112660469262347113418485557417779929346029262739885121595678478780526521844006289081612151016311915256260563044660702187188333404258815677422188693373856681789174902389955849195764433886233838814678910227748830445127280097622145063696371973167837355565828648142935752943645793819170447715128269260953982262222461513380006222832180849229352564090413169182890505945501878415441213481
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							680beff1de173ef85fbff932d3fe2bcf6f9733cd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (13 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '42684.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016afcd279e90000040300473045022024ab52b1d744f401569bb6c18f8d0f6697fa5752ef8e9331d82bb32bc5dc552702210088a01a5ee27d5c6a824a13bf10e659d36fde76f34cb1c98a07a44ca63219e0c1007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016afcd27ba4000004030047304502200795c5a094e4d7265cf32cfd30529842a3cf82a67ff68da2646123d7b0a6a4c5022100a48ff5f153415caea744756d54d727eea02f67463bb6bcdb9459e62dc5bf67fd
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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