www.epaleontology.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:68:dc:cf:19:ed:20:78:5f:e5:ec:3e:6e:6a:bd:3d:07:c3 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.epaleontology.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:68:dc:cf:19:ed:20:78:5f:e5:ec:3e:6e:6a:bd:3d:07:c3
Serial Number (int): 297019729445428101992871789883097071028163
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: a9:a9:26:57:2a:79:38:ce:39:7c:12:55:94:7a:28:f7:85:34:39:ca
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 02:ec:02:99:33:06:6a:69:92:61:8c:13:0e:48:30:df:52:ad:d0:38
Fingerprint (sha256): 01:ab:95:b1:98:f3:07:ea:cd:bd:ee:bc:5f:2e:de:a1:0a:bf:f3:c4:cd:25:f7:c6:5b:78:8f:a7:0f:b2:20:57

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.epaleontology.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.epaleontology.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.epaleontology.com

Other certificates including the domain name epaleontology.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.epaleontology.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGYTCCBUmgAwIBAgISA2jczxntIHhf5ew+bmq9PQfDMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAyMTEwNDM1MjVaFw0y
MDA1MTEwNDM1MjVaMCAxHjAcBgNVBAMTFXd3dy5lcGFsZW9udG9sb2d5LmNvbTCC
AiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAJW0k810Le0nu2TTrUFX5Hr2
gTUQZVGD+iu9DF7Peo7nMRWQoTkuWuS0Nk/jeloJDXeDKQ2cvk9CVoo3aHEgVvGg
SUHsL2OCNXZ8w4IYaGTB9It9W9UVBILCoV7vdCGr/sjsTonanq01+F4bJKFPWJ6K
6IyjN3nLG8xUT1mmvH9Hcqyq8bvloJel20HSn6i3r4qOazt+3DCtsrIO4s+4dbK8
2CcAKE6hdr92dp15uxwXwXyv8WoQbz2plU4TQh96HNn3dBDi245M2B/Ip69mEWdy
G6oKwryxsXGkxcxweu+LhHAu7XgTfbOLtwAh/I71G0Sw/qSGJAi8tY9x6epUlPtT
jICSV1f2Jii3VoIZ1YxgiQ9IITGLOIBhHExg/NgF9CdMDLJwz31SQYciOrA6D4eW
JoG2owEJ2vrQnnY0OCjEpwAsdxwGow5Q3B1GiIggrpxH7YRZanDW7pgFq/3mOrHG
uOIMwNYq3o2hRxAQyz3RnVPx6AGX2CDR/+XjZVV48BE5pJeTM8wtv53kPE7wrfmI
33pU+J2d37bh9S7i1msxlZ2WzXrNNYrciBDqe4uYOL4LKeClsNhW7x34JEilV6TM
WA461sdi+qpErOvOyGicJdEGRsYyYgg8lnlyXcXxrrfzV97GZ/5rxuTHaqaDiLiT
3tkS3sahiCkEkq9CykVvAgMBAAGjggJpMIICZTAOBgNVHQ8BAf8EBAMCBaAwHQYD
VR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0O
BBYEFKmpJlcqeTjOOXwSVZR6KPeFNDnKMB8GA1UdIwQYMBaAFKhKamMEfd265tE5
t6ZFZe/zqOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29j
c3AuaW50LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2Nl
cnQuaW50LXgzLmxldHNlbmNyeXB0Lm9yZy8wIAYDVR0RBBkwF4IVd3d3LmVwYWxl
b250b2xvZ3kuY29tMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEB
MCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBAwYK
KwYBBAHWeQIEAgSB9ASB8QDvAHYAXqdz+d9WwOe1Nkh90EngMnqRmgyEoRIShBh1
loFxRVgAAAFwMr66DAAABAMARzBFAiAVdoIEa0Zi20/P4ogQjSU9/XbPoq1QsshC
xCOeohsHhAIhANjHfSRTXhOZBFaIuUc6oghbRwF9WGqVlU0EJEoThD7QAHUAsh4F
zIuizYogTodm+Su5iiUgZ2va+nDnsklTLe+LkF4AAAFwMr66AAAABAMARjBEAiBN
b0u0nbYvcIMbUzPAZ2pH1CoMVm6jj1L7kQeZvq+lUAIge6MJ2kmYgTkvHP4EiYTy
BjPJJreEZ1RkrWc3sySxoCYwDQYJKoZIhvcNAQELBQADggEBAA40z90Ye88b75LW
oixiT+OsW72YZVB/aZYavma/MRY6plSEljacOWU0Blgv/IPpHzVFy2DzLWM7XpzZ
uzJ0fhGak2Pzf+VL3H8Q30ds4Q3tStU6yfRhxdx6y5T/xwwXwmjFxxcPNoAKFPNl
gJDLGW4VGrCbZnJz5Ik4PK43IT609WbOhGf/z2vExolplTdHZKOLXdH68quHTGTd
OLnDZvQrxaV2fNr/NgNYRLXqLqe263XNQTgAVuF1GxcYT+Z08KEv6bq923w444Nr
uZpGvze0+ONp0Rdfio5LprrVStGPFDR4J74grzH4mg+8qdfQ+IG3SWekoGwJu1Sh
l3OShLo=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 297019729445428101992871789883097071028163
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-11 04:35:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-11 04:35:25 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.epaleontology.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 610744666642613973603887810267168576290911957853514858901545284809846663207902212793695696007052310488958455843184655556443845742337551147688174687819488552730579249555595180160278951116381531223723882616190348995743872890001590513163987505499934199497626897052277735944816135411194214994940092563619912662675947357586259720137277676675831716334252686004750136294918094894508446763710273461157833608276881750186089798190458234963206191226623770755530966975800865249400630757928867984622218863297732332254130166269498653069618175360921886594385490705254858567602592158563087271713800762769049008634089114970138668080218559730358361927380318341848830686174666146156862847195867876152861388552907525690306105790331672158962076845385825042693567845842766996055058400496610715370666267519370467838712617463662030921185666467668336389371673880446011390756012107062221190123538706820955783998570461359030924801143064314800966754505007677130833603789139090094680291198867765409182019152037696459873773691840102072164387014282015645357365257584439548417519371675884109370878530828701880968174944296932126345644207927371783819941149708150798151570247242168228994083445164961755561385836188023003949967365381059717267023989583503630808505795951
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a9a926572a7938ce397c1255947a28f7853439ca
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.epaleontology.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000017032beba0c00000403004730450220157682046b4662db4fcfe288108d253dfd76cfa2ad50b2c842c4239ea21b0784022100d8c77d24535e1399045688b9473aa2085b47017d586a95954d04244a13843ed0007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000017032beba00000004030046304402204d6f4bb49db62f70831b5333c0676a47d42a0c566ea38f52fb910799beafa55002207ba309da499881392f1cfe048984f20633c926b784675464ad6737b324b1a026
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		000e34cfdd187bcf1bef92d6a22c624fe3ac5bbd9865507f69961abe66bf31163aa6548496369c39653406582ffc83e91f3545cb60f32d633b5e9cd9bb32747e119a9363f37fe54bdc7f10df476ce10ded4ad53ac9f461c5dc7acb94ffc70c17c268c5c7170f36800a14f3658090cb196e151ab09b667273e489383cae37213eb4f566ce8467ffcf6bc4c6896995374764a38b5dd1faf2ab874c64dd38b9c366f42bc5a5767cdaff36035844b5ea2ea7b6eb75cd41380056e1751b17184fe674f0a12fe9babddb7c38e3836bb99a46bf37b4f8e369d1175f8a8e4ba6bad54ad18f14347827be20af31f89a0fbca9d7d0f881b74967a4a06c09bb54a197739284ba