www.ianchan.dev

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:6d:6c:27:1e:49:fc:a9:25:90:0b:37:e8:db:39:51:9d:47 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.ianchan.dev

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:6d:6c:27:1e:49:fc:a9:25:90:0b:37:e8:db:39:51:9d:47
Serial Number (int): 298571395527119424911345257145400697134407
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 92:7f:a2:7f:98:aa:0c:87:8e:63:65:a4:d1:eb:59:49:d1:b8:47:1d
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 5c:14:16:52:5b:48:98:42:9c:9c:e4:5c:b5:e1:a7:30:92:7e:88:0e
Fingerprint (sha256): 05:97:7d:a5:03:8c:25:7d:98:7d:3e:36:99:26:13:fe:d8:56:ac:87:70:7a:c0:15:10:8e:e2:0f:44:03:9c:e9

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.ianchan.dev

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.ianchan.dev

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.ianchan.dev

Other certificates including the domain name ianchan.dev

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.ianchan.dev in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGVTCCBT2gAwIBAgISA21sJx5J/KklkAs36Ns5UZ1HMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEwMDMxOTEzMjJaFw0y
MDAxMDExOTEzMjJaMBoxGDAWBgNVBAMTD3d3dy5pYW5jaGFuLmRldjCCAiIwDQYJ
KoZIhvcNAQEBBQADggIPADCCAgoCggIBAPA+nCJRJSikywMO9hAS2M7KxjQSCawl
vN5w9pE0gJtseXKudolWl6BHq7ZSGRK4EgpuTKTUcaLrP0QRA8yUc5iFOztyX4KS
lB2sa7pTUHAEYdBRt/O789XVOkyH2RfLc+lO/t6414N2j1XD9Ik5mxax6krTaoGx
3Ej0lr9A5piD3eWyU7/X8XEkUDkkCPcBDhWIb6u6y8DmMEyhROQE4/0XnMZrEvpF
J6gRFMl2X6HlHs+Jj2ficGkUFjKvZJ2bhH8T5ZLu43RdmuEzfbTWptWdfGcOqsVM
5Q0/waQ+H1urMJULNLnQkTY7DCQ8M+5uOyGQ53m+dZI5LKu1dXc36rNZI0mNZYrq
X9iBqp0BLIZ1qWcyQ01AVoyTUpy+NrgowGc8cpXnkB8NzEnjivL/YD3oYqmQ84FN
oymBRc8vPiQmuB2DCl5CLW5XJUWzFREpXthD0n6rLw/1+7NoCkZRFavbG+gqfAQN
TV9dtYdtyApZI/rVg6sYJKeHFf92xlC1viXjm8G4ke2QR909R4kyxbKpL+vzJHEt
oXjQWoxHIV5I3sRmr8h8TMajv5nL6+nqxRl68cmFxUOS6k8Y6sPfe99EG7XEUM9C
9TfHV3leuTyIgcX7IGXRsz8fFEXkDO5j/fwzhKKgp42wwW5JJ1m/f+71nQHCPPye
oFXMf2wQ1/RBAgMBAAGjggJjMIICXzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYw
FAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFJJ/
on+YqgyHjmNlpNHrWUnRuEcdMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/z
qOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50
LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50
LXgzLmxldHNlbmNyeXB0Lm9yZy8wGgYDVR0RBBMwEYIPd3d3LmlhbmNoYW4uZGV2
MEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUH
AgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBAwYKKwYBBAHWeQIEAgSB
9ASB8QDvAHUA8JWkWfIA0YJAEC0vk4iOrUv+HUfjmeHQNKawqKqOsnMAAAFtk0Fw
vwAABAMARjBEAiADMSjbrLuftgasINMElRQWNzeQfaeH1wR9ChpICt1OUAIgBszt
PhbStw9RVMnuDwV9WYOXi7UjWC5/gVKHxEEKYjAAdgApPFGWVMg5ZbqqUPxYB9S3
b79Yeily3KTDDPTlRUf0eAAAAW2TQXDoAAAEAwBHMEUCIQDh/gndUtJOy+NGSpn2
vmV6qTOSlL7jjI+VxLNHR+U8fgIgZrMmP+G8KC/d8ZzbV1K/WIuE2TqzzAdgg3aO
IEy1Gm0wDQYJKoZIhvcNAQELBQADggEBAHd/gyuOyQ8fPTy0O7HFlTzVILlGMZKe
7BbV5Mr7fuUVV0Sfv61/8Hlr2N5P+WM2xnf3Bjx1DJU4fBz8lem5we4IdIKX6ZjK
MlzkfNLxavkKJ/In+NkBg4TeNIm0e6fVOw/dnZs2jTRTYIopD+V94HwCxi9ZovMD
cXPsyJ/xthD2ZVsza6l981p7NmIymIkz9DUoR0ff6MjcnsDptHHaWtEQjDTbK5AR
X9nr19Nf3y3USOJTQuB7tUbdC2f1CbQIZBwmlsw1JIca2XOcixOdIiQEBpDIKFi9
eV4OISDMH5yStaEggA3aBOPIMlCSRXTrWwi1mg4V4adQz4uXdZV+sqU=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 298571395527119424911345257145400697134407
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-03 19:13:22 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-01 19:13:22 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.ianchan.dev'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 980112334534078442681906848281278469569342698391823607032156263682115634068894481537812996266325018262879982730470062683622046238428008775832521945245023082138742823485684702381696025452002340612217590121307572095206335680789945337407786244813903905826636857365909921309540140646484943687377965576596042698297570103390106533060817109987050140583437127170265292049515238349478851848185259424443211957451704802936967975220850784977348454135230276226607073179077820710466827320347619914710830822824076271746083506962927808770775784908120912568411388183160903080279738197579015687298025490045581927375760123474731985436818326072291104605496757383915038952334263677083626541072825969063632045673879461245092560356515238891858434636832073089011231934216867898365522270277425874527574204964593583879746061826066296156670717439356314915309525160170577937214464451822114238813034338404077627107658699579706564704051227624402328398048842137761883447807593022853104671670215154578693347580197999949469324376517073690221491660684051867028218989358669896557827058363055516832569233348819844597520905203432071730460894665687146115059959491653702115519386856494202989314623778547208820822456156471262959169045086051824800768590326637361094288995393
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							927fa27f98aa0c878e6365a4d1eb5949d1b8471d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ianchan.dev'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016d934170bf00000403004630440220033128dbacbb9fb606ac20d3049514163737907da787d7047d0a1a480add4e50022006cced3e16d2b70f5154c9ee0f057d5983978bb523582e7f815287c4410a6230007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016d934170e80000040300473045022100e1fe09dd52d24ecbe3464a99f6be657aa9339294bee38c8f95c4b34747e53c7e022066b3263fe1bc282fddf19cdb5752bf588b84d93ab3cc076083768e204cb51a6d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00777f832b8ec90f1f3d3cb43bb1c5953cd520b94631929eec16d5e4cafb7ee51557449fbfad7ff0796bd8de4ff96336c677f7063c750c95387c1cfc95e9b9c1ee08748297e998ca325ce47cd2f16af90a27f227f8d9018384de3489b47ba7d53b0fdd9d9b368d3453608a290fe57de07c02c62f59a2f3037173ecc89ff1b610f6655b336ba97df35a7b366232988933f435284747dfe8c8dc9ec0e9b471da5ad1108c34db2b90115fd9ebd7d35fdf2dd448e25342e07bb546dd0b67f509b408641c2696cc3524871ad9739c8b139d2224040690c82858bd795e0e2120cc1f9c92b5a120800dda04e3c83250924574eb5b08b59a0e15e1a750cf8b9775957eb2a5