www.maza.life

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:43:dd:55:df:84:7b:b4:f0:21:85:e6:93:0d:dd:cb:ff:c2 was issued on by Let's Encrypt.

With 20 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.maza.life

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:43:dd:55:df:84:7b:b4:f0:21:85:e6:93:0d:dd:cb:ff:c2
Serial Number (int): 284429981644758803323225263841412549181378
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 08:a1:f5:1b:51:1f:78:32:b9:02:6d:0c:d4:09:86:79:8d:34:16:b0
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): c6:9c:28:f8:3b:75:ba:4a:e0:df:08:b4:69:47:12:90:08:51:f3:1e
Fingerprint (sha256): 03:b5:db:78:64:e6:a4:88:49:f6:94:53:c2:a1:35:c4:15:e2:33:32:f6:15:1c:18:38:e9:1d:4f:60:5c:f3:86

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.maza.life

20

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.maza.life

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bushidolife.xyz
chicano.top
dev1gnu.xyz
diggenius.com
maza.life
mazagratis.xyz
mazaninja.xyz
mazaska.xyz
mazatech.xyz
oneloveconscious.xyz
www.bushidolife.xyz
www.chicano.top
www.dev1gnu.xyz
www.diggenius.com
www.maza.life
www.mazagratis.xyz
www.mazaninja.xyz
www.mazaska.xyz
www.mazatech.xyz
www.oneloveconscious.xyz

Other certificates including the domain name maza.life

(limited to 100 certificates)
www.maza.life
www.dev1gnu.xyz
www.rase.me
www.highschool-porn.com
www.kidsorganicgardeningtv.org
www.primella.com
fortmyersbaymarina.com
inmy.care
www.nancydixon.com
www.severesleepapnea.com
www.workoutdad.com
www.spinalstemcell.com
www.mazaninja.xyz
perfectbeauty.org
www.l4l9.com

Certificate

The complete raw certificate details for www.maza.life in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHqyJm7AVrEjfCnCHksG
OUB7tY5+L4KWO82JboFZC/9P2oVTVV3IggOjN1MlX3rHSeqQc1H7GHLzK57hpjxx
SpFRqReLgmEHrdq4i1CKrUDyDPmgGfgmRCSnL+qbo/Do3rKi8q1tC+kCesvjPNH/
Z7OEBZVJylJHkekImsxdZkt0FT/ZmcdlHIv/MRPkfTkbjQla1Q+ufnOL+GkuW/BW
pBDDrpVj9FsNZBY/7kwThws1zLoUhyhU9/yK2DXw2nAQS8eQa5WPvIY2Gi7yaejH
gydH9+NgyG2lC/u2KSdTEU9YHmvevVpEsbgoa89m8Lf5iOj01ABI++sQeLglZAWV
OQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 284429981644758803323225263841412549181378
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-24 21:49:45 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-22 21:49:45 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.maza.life'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21268538837062990278715714937493218056427876909878832209599000276866234834576772941073505446090833721956761272817835217749752977464967545574141340927326528524738781463398528793985728351186434436036622055258846527446776051043373909618670400246748524357184431498876888808330023778855547530949638993952228607485690422408434457367716853378670289366917870766861987027054006803349765578605476941225102688722894628626946341811024884163060935659076018279358837357542933983703622383315602017338252611453597167341016385026479621583844540035367223132683565799336527452195811869858114678647146540886134978115477690274909511849273
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							08a1f51b511f7832b9026d0cd40986798d3416b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (342 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bushidolife.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chicano.top'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev1gnu.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diggenius.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maza.life'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mazagratis.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mazaninja.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mazaska.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mazatech.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oneloveconscious.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bushidolife.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chicano.top'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dev1gnu.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diggenius.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maza.life'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mazagratis.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mazaninja.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mazaska.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mazatech.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oneloveconscious.xyz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016dfff628bb000004030046304402205dfb8e7c79a5e8be9581434ea1ab26682bdbe7efba5be278d1e6ed70537e4d9002204b56d7eebf96ffcf9394405e5ba1995f00a53aec4bb15aed7013c94dc2cf385700760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016dfff6290d000004030047304502204150f6e66c2fe114e609ca89aeed93f3c72fc5edd58c5536fe1a3328a31d480e022100eec4585f33f93ffdfe0b550cbb7dc658db71d40c29dc88592d4b840b559fa5e4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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