devotional.me

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:4a:9b:42:ab:ff:dc:c4:f0:4b:99:fa:fd:32:fc:59:35:3d was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=devotional.me

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:4a:9b:42:ab:ff:dc:c4:f0:4b:99:fa:fd:32:fc:59:35:3d
Serial Number (int): 286724129466933059947041938681691859662141
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 35:70:3a:ba:3e:7f:46:b8:8e:10:5c:51:87:98:8d:d5:74:3f:aa:b3
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 4a:d5:37:8f:e3:6b:cb:76:c7:8b:39:4b:3a:f7:7f:20:bd:f6:b9:66
Fingerprint (sha256): 01:35:c6:44:82:34:71:c9:25:ed:ce:a3:ac:2a:e7:31:81:47:80:04:d6:da:45:ec:6e:85:80:da:8b:a7:98:90

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate devotional.me

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for devotional.me

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

devotional.me

Other certificates including the domain name devotional.me

(limited to 100 certificates)

Certificate

The complete raw certificate details for devotional.me in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAvcqEIEgPb+BUfjrF+lMb
GO5kdPE5rSkd5ifZFiu4Fo0F045baSTKL0pw+OukKhv4jdhICdMHPcHD0/4ogxP7
erB/HvICxaAIcooMLpguxUqgZRw+dOwdZ92DcrPgorPnzjx0v/baj8kQF7/BxhFF
0clKuuVBRWA1yMGdx11aTPCUQz8SiYPxLk3rdj38f9+gH3XH3604ELGRDfX6lyGN
3PdTVZHpmgyEPcr81G18IQchAQKzoyxHEYRe+7Y+aQ0yV7Syu/m9GilnZeyF6zfa
P5mpIXA69tE6Rgfcl8S4xklUAmZRbSOjZKm8InSyVk46ZXLzxd+d5v1U8aEpMJ+S
T2vQSy6Xco2q0vyTGYE1MAMtx2OcrNyOada0h6dgJI6phMTXt0us91NE2cyKwzaT
U9WCZvDov7cpU4J9FxGTyFtRKZ18n1V53J5iNBRiwzP4TUssLNjQRjwZP0bn+jVm
liCu0+oFe5fklENZM3NmeNEVfXHsdSllgaJNXXXPh6ZR0cV9zq8av7e4lNMyIy8g
bw/ZuEsENCLH0ILw4Coy+pXc0RHi0RqBSGJmfAzCafQVbvtqm2GmrZs60jX2cJra
WrqtOTX0EbsRhvWJyjAGa/VvzZ/wNsjAOI6westMrBtzsSUbyoihGMve0fv73D8e
jC1eBOmAdB/hAKTvgPl1eKUCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 286724129466933059947041938681691859662141
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-03 12:25:41 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-03 12:25:41 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'devotional.me'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 774280047909510794668326158249130717473290052838951456394981778323281420892984994483137163099357191886052216002169967466251017823525653352160158637051986534758554544422692168457005156020361118455889181702779575867410389824349561984451989619261573079684173179378100912785825961737829679325408493069727450080449466679316173692455120966638252468487352527463088117175552084520580756850250539673985706570044894642480469279208040222475621803387508659602350402345394307561838170191591665448998173058024960017287811377080336526817200732855093236222461381949515550041923246105351554151474236037218409456969187978091205650384326369963219324748745297168737069700549056812638900935853373357027187820892260224680855871943306041638478131993053862871056842869346994391427387897372389929741643075824072744669400706932915226075844615262212704699504986984509130709846611068505653232794874445812633767177668901590937896479434651721330804042766260380194932557607608398734302590797256330963002847593687699002801251648066430849169936076387098703127783485423407797052910500080735205415902014233584371159721042682518179074776972075360727945467108197405503649457087857264625644703355080941981887088839830616561238146873619176714139694456970143113160353478821
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							35703aba3e7f46b88e105c5187988dd5743faab3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devotional.me'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076005ea773f9df56c0e7b536487dd049e0327a919a0c84a112128418759681714558000001700b3a64b9000004030047304502210090a486b41425c00bec1090fac9c7fb8e0658aee824c5265db3d6f8a614f73117022057687580be2c668afbb96595f6dc9a0d6db8427baba006a8405947e93f1c6137007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e000001700b3a64a80000040300473045022054b31795c1cc8e792d09f9e186883976a5d3f0f21698d3d227a39baeb25cac630221009185ed35e49631bdcf992f30211e977fa9f70e87fc1bd877d59705215fd88ffc
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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