devotional.me
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:4a:9b:42:ab:ff:dc:c4:f0:4b:99:fa:fd:32:fc:59:35:3d was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=devotional.me
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:4a:9b:42:ab:ff:dc:c4:f0:4b:99:fa:fd:32:fc:59:35:3dSerial Number (int): 286724129466933059947041938681691859662141
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 35:70:3a:ba:3e:7f:46:b8:8e:10:5c:51:87:98:8d:d5:74:3f:aa:b3
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 4a:d5:37:8f:e3:6b:cb:76:c7:8b:39:4b:3a:f7:7f:20:bd:f6:b9:66
Fingerprint (sha256): 01:35:c6:44:82:34:71:c9:25:ed:ce:a3:ac:2a:e7:31:81:47:80:04:d6:da:45:ec:6e:85:80:da:8b:a7:98:90
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate devotional.me
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for devotional.me
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
devotional.me
Other certificates including the domain name devotional.me
(limited to 100 certificates)
Certificate
The complete raw certificate details for devotional.me in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgISA0qbQqv/3MTwS5n6/TL8WTU9MA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAyMDMxMjI1NDFaFw0y MDA1MDMxMjI1NDFaMBgxFjAUBgNVBAMTDWRldm90aW9uYWwubWUwggIiMA0GCSqG SIb3DQEBAQUAA4ICDwAwggIKAoICAQC9yoQgSA9v4FR+OsX6UxsY7mR08TmtKR3m J9kWK7gWjQXTjltpJMovSnD466QqG/iN2EgJ0wc9wcPT/iiDE/t6sH8e8gLFoAhy igwumC7FSqBlHD507B1n3YNys+Cis+fOPHS/9tqPyRAXv8HGEUXRyUq65UFFYDXI wZ3HXVpM8JRDPxKJg/EuTet2Pfx/36AfdcffrTgQsZEN9fqXIY3c91NVkemaDIQ9 yvzUbXwhByEBArOjLEcRhF77tj5pDTJXtLK7+b0aKWdl7IXrN9o/makhcDr20TpG B9yXxLjGSVQCZlFtI6NkqbwidLJWTjplcvPF353m/VTxoSkwn5JPa9BLLpdyjarS /JMZgTUwAy3HY5ys3I5p1rSHp2AkjqmExNe3S6z3U0TZzIrDNpNT1YJm8Oi/tylT gn0XEZPIW1EpnXyfVXncnmI0FGLDM/hNSyws2NBGPBk/Ruf6NWaWIK7T6gV7l+SU Q1kzc2Z40RV9cex1KWWBok1ddc+HplHRxX3Orxq/t7iU0zIjLyBvD9m4SwQ0IsfQ gvDgKjL6ldzREeLRGoFIYmZ8DMJp9BVu+2qbYaatmzrSNfZwmtpauq05NfQRuxGG 9YnKMAZr9W/Nn/A2yMA4jrB6y0ysG3OxJRvKiKEYy97R+/vcPx6MLV4E6YB0H+EA pO+A+XV4pQIDAQABo4ICYjCCAl4wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQG CCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBQ1cDq6 Pn9GuI4QXFGHmI3VdD+qszAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86js oTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14 My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14 My5sZXRzZW5jcnlwdC5vcmcvMBgGA1UdEQQRMA+CDWRldm90aW9uYWwubWUwTAYD VR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYa aHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEEBgorBgEEAdZ5AgQCBIH1BIHy APAAdgBep3P531bA57U2SH3QSeAyepGaDIShEhKEGHWWgXFFWAAAAXALOmS5AAAE AwBHMEUCIQCQpIa0FCXAC+wQkPrJx/uOBliu6CTFJl2z1vimFPcxFwIgV2h1gL4s Zor7uWWV9tyaDW24QnuroAaoQFlH6T8cYTcAdgCyHgXMi6LNiiBOh2b5K7mKJSBn a9r6cOeySVMt74uQXgAAAXALOmSoAAAEAwBHMEUCIFSzF5XBzI55LQn54YaIOXal 0/DyFpjT0iejm66yXKxjAiEAkYXtNeSWMb3PmS8wIR6Xf6n3Dof8G9h31ZcFIV/Y j/wwDQYJKoZIhvcNAQELBQADggEBAFekLgoQdk6XhSpBl4E4ZXAMAERzaa6jPNTN q3YULtLY4CqzJytYwCaH3WNPbLtu8U4NmRtwpSQoPRPH2o4iV1bzmxKjUxR+23uy XuB99ciO0qZdfhgSPV6IeYc4F3myquIULpfQp0Y1ziHe+4K0gaU6WwXqdVAYseBu 82+mDQNwCVNeN3Hf/Ljqb3XY6pcwEAJ4AGcQF9flL5dG6QfSD1n6RJeIOH+YgzcA FbJ/crCubQVI1Ei9AvGQP0nzg2HxmXqrk4E1j2AScwALFVFX64aUTseC3kvMfY07 FotrTmP2M30lDxSbdfuONXteBaIKaHshImwMIjLMoZNiWpT1XqI= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAvcqEIEgPb+BUfjrF+lMb GO5kdPE5rSkd5ifZFiu4Fo0F045baSTKL0pw+OukKhv4jdhICdMHPcHD0/4ogxP7 erB/HvICxaAIcooMLpguxUqgZRw+dOwdZ92DcrPgorPnzjx0v/baj8kQF7/BxhFF 0clKuuVBRWA1yMGdx11aTPCUQz8SiYPxLk3rdj38f9+gH3XH3604ELGRDfX6lyGN 3PdTVZHpmgyEPcr81G18IQchAQKzoyxHEYRe+7Y+aQ0yV7Syu/m9GilnZeyF6zfa P5mpIXA69tE6Rgfcl8S4xklUAmZRbSOjZKm8InSyVk46ZXLzxd+d5v1U8aEpMJ+S T2vQSy6Xco2q0vyTGYE1MAMtx2OcrNyOada0h6dgJI6phMTXt0us91NE2cyKwzaT U9WCZvDov7cpU4J9FxGTyFtRKZ18n1V53J5iNBRiwzP4TUssLNjQRjwZP0bn+jVm liCu0+oFe5fklENZM3NmeNEVfXHsdSllgaJNXXXPh6ZR0cV9zq8av7e4lNMyIy8g bw/ZuEsENCLH0ILw4Coy+pXc0RHi0RqBSGJmfAzCafQVbvtqm2GmrZs60jX2cJra WrqtOTX0EbsRhvWJyjAGa/VvzZ/wNsjAOI6westMrBtzsSUbyoihGMve0fv73D8e jC1eBOmAdB/hAKTvgPl1eKUCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 286724129466933059947041938681691859662141 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-03 12:25:41 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-03 12:25:41 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'devotional.me' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 774280047909510794668326158249130717473290052838951456394981778323281420892984994483137163099357191886052216002169967466251017823525653352160158637051986534758554544422692168457005156020361118455889181702779575867410389824349561984451989619261573079684173179378100912785825961737829679325408493069727450080449466679316173692455120966638252468487352527463088117175552084520580756850250539673985706570044894642480469279208040222475621803387508659602350402345394307561838170191591665448998173058024960017287811377080336526817200732855093236222461381949515550041923246105351554151474236037218409456969187978091205650384326369963219324748745297168737069700549056812638900935853373357027187820892260224680855871943306041638478131993053862871056842869346994391427387897372389929741643075824072744669400706932915226075844615262212704699504986984509130709846611068505653232794874445812633767177668901590937896479434651721330804042766260380194932557607608398734302590797256330963002847593687699002801251648066430849169936076387098703127783485423407797052910500080735205415902014233584371159721042682518179074776972075360727945467108197405503649457087857264625644703355080941981887088839830616561238146873619176714139694456970143113160353478821 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 35703aba3e7f46b88e105c5187988dd5743faab3 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devotional.me' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f00076005ea773f9df56c0e7b536487dd049e0327a919a0c84a112128418759681714558000001700b3a64b9000004030047304502210090a486b41425c00bec1090fac9c7fb8e0658aee824c5265db3d6f8a614f73117022057687580be2c668afbb96595f6dc9a0d6db8427baba006a8405947e93f1c6137007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e000001700b3a64a80000040300473045022054b31795c1cc8e792d09f9e186883976a5d3f0f21698d3d227a39baeb25cac630221009185ed35e49631bdcf992f30211e977fa9f70e87fc1bd877d59705215fd88ffc . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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