www.ianchan.dev
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:6d:6c:27:1e:49:fc:a9:25:90:0b:37:e8:db:39:51:9d:47 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.ianchan.dev
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:6d:6c:27:1e:49:fc:a9:25:90:0b:37:e8:db:39:51:9d:47Serial Number (int): 298571395527119424911345257145400697134407
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 92:7f:a2:7f:98:aa:0c:87:8e:63:65:a4:d1:eb:59:49:d1:b8:47:1d
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 5c:14:16:52:5b:48:98:42:9c:9c:e4:5c:b5:e1:a7:30:92:7e:88:0e
Fingerprint (sha256): 05:97:7d:a5:03:8c:25:7d:98:7d:3e:36:99:26:13:fe:d8:56:ac:87:70:7a:c0:15:10:8e:e2:0f:44:03:9c:e9
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate www.ianchan.dev
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.ianchan.dev
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.ianchan.dev
Other certificates including the domain name ianchan.dev
(limited to 100 certificates)
www.ianchan.dev
jkobttf.ianchan.dev
*.ianchan.dev
*.ianchan.dev
amado.ianchan.dev
www.ianchan.dev
ianchan.dev
jkobt.ianchan.dev
ianchan.dev
*.ianchan.dev
ianchan.dev
www.ianchan.dev
jkobtcli.ianchan.dev
*.ianchan.dev
*.ianchan.dev
*.ianchan.dev
www.ianchan.dev
www.ianchan.dev
timessquare-sso.ianchan.dev
www.ianchan.dev
amado.ianchan.dev
*.ianchan.dev
*.ianchan.dev
www.ianchan.dev
ianchan.dev
jkobt.ianchan.dev
jkobttf.ianchan.dev
*.ianchan.dev
*.ianchan.dev
amado.ianchan.dev
www.ianchan.dev
ianchan.dev
jkobt.ianchan.dev
ianchan.dev
*.ianchan.dev
ianchan.dev
www.ianchan.dev
jkobtcli.ianchan.dev
*.ianchan.dev
*.ianchan.dev
*.ianchan.dev
www.ianchan.dev
www.ianchan.dev
timessquare-sso.ianchan.dev
www.ianchan.dev
amado.ianchan.dev
*.ianchan.dev
*.ianchan.dev
www.ianchan.dev
ianchan.dev
jkobt.ianchan.dev
Certificate
The complete raw certificate details for www.ianchan.dev in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGVTCCBT2gAwIBAgISA21sJx5J/KklkAs36Ns5UZ1HMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEwMDMxOTEzMjJaFw0y MDAxMDExOTEzMjJaMBoxGDAWBgNVBAMTD3d3dy5pYW5jaGFuLmRldjCCAiIwDQYJ KoZIhvcNAQEBBQADggIPADCCAgoCggIBAPA+nCJRJSikywMO9hAS2M7KxjQSCawl vN5w9pE0gJtseXKudolWl6BHq7ZSGRK4EgpuTKTUcaLrP0QRA8yUc5iFOztyX4KS lB2sa7pTUHAEYdBRt/O789XVOkyH2RfLc+lO/t6414N2j1XD9Ik5mxax6krTaoGx 3Ej0lr9A5piD3eWyU7/X8XEkUDkkCPcBDhWIb6u6y8DmMEyhROQE4/0XnMZrEvpF J6gRFMl2X6HlHs+Jj2ficGkUFjKvZJ2bhH8T5ZLu43RdmuEzfbTWptWdfGcOqsVM 5Q0/waQ+H1urMJULNLnQkTY7DCQ8M+5uOyGQ53m+dZI5LKu1dXc36rNZI0mNZYrq X9iBqp0BLIZ1qWcyQ01AVoyTUpy+NrgowGc8cpXnkB8NzEnjivL/YD3oYqmQ84FN oymBRc8vPiQmuB2DCl5CLW5XJUWzFREpXthD0n6rLw/1+7NoCkZRFavbG+gqfAQN TV9dtYdtyApZI/rVg6sYJKeHFf92xlC1viXjm8G4ke2QR909R4kyxbKpL+vzJHEt oXjQWoxHIV5I3sRmr8h8TMajv5nL6+nqxRl68cmFxUOS6k8Y6sPfe99EG7XEUM9C 9TfHV3leuTyIgcX7IGXRsz8fFEXkDO5j/fwzhKKgp42wwW5JJ1m/f+71nQHCPPye oFXMf2wQ1/RBAgMBAAGjggJjMIICXzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYw FAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFJJ/ on+YqgyHjmNlpNHrWUnRuEcdMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/z qOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50 LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50 LXgzLmxldHNlbmNyeXB0Lm9yZy8wGgYDVR0RBBMwEYIPd3d3LmlhbmNoYW4uZGV2 MEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUH AgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBAwYKKwYBBAHWeQIEAgSB 9ASB8QDvAHUA8JWkWfIA0YJAEC0vk4iOrUv+HUfjmeHQNKawqKqOsnMAAAFtk0Fw vwAABAMARjBEAiADMSjbrLuftgasINMElRQWNzeQfaeH1wR9ChpICt1OUAIgBszt PhbStw9RVMnuDwV9WYOXi7UjWC5/gVKHxEEKYjAAdgApPFGWVMg5ZbqqUPxYB9S3 b79Yeily3KTDDPTlRUf0eAAAAW2TQXDoAAAEAwBHMEUCIQDh/gndUtJOy+NGSpn2 vmV6qTOSlL7jjI+VxLNHR+U8fgIgZrMmP+G8KC/d8ZzbV1K/WIuE2TqzzAdgg3aO IEy1Gm0wDQYJKoZIhvcNAQELBQADggEBAHd/gyuOyQ8fPTy0O7HFlTzVILlGMZKe 7BbV5Mr7fuUVV0Sfv61/8Hlr2N5P+WM2xnf3Bjx1DJU4fBz8lem5we4IdIKX6ZjK MlzkfNLxavkKJ/In+NkBg4TeNIm0e6fVOw/dnZs2jTRTYIopD+V94HwCxi9ZovMD cXPsyJ/xthD2ZVsza6l981p7NmIymIkz9DUoR0ff6MjcnsDptHHaWtEQjDTbK5AR X9nr19Nf3y3USOJTQuB7tUbdC2f1CbQIZBwmlsw1JIca2XOcixOdIiQEBpDIKFi9 eV4OISDMH5yStaEggA3aBOPIMlCSRXTrWwi1mg4V4adQz4uXdZV+sqU= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA8D6cIlElKKTLAw72EBLY zsrGNBIJrCW83nD2kTSAm2x5cq52iVaXoEertlIZErgSCm5MpNRxous/RBEDzJRz mIU7O3JfgpKUHaxrulNQcARh0FG387vz1dU6TIfZF8tz6U7+3rjXg3aPVcP0iTmb FrHqStNqgbHcSPSWv0DmmIPd5bJTv9fxcSRQOSQI9wEOFYhvq7rLwOYwTKFE5ATj /RecxmsS+kUnqBEUyXZfoeUez4mPZ+JwaRQWMq9knZuEfxPlku7jdF2a4TN9tNam 1Z18Zw6qxUzlDT/BpD4fW6swlQs0udCRNjsMJDwz7m47IZDneb51kjksq7V1dzfq s1kjSY1liupf2IGqnQEshnWpZzJDTUBWjJNSnL42uCjAZzxyleeQHw3MSeOK8v9g PehiqZDzgU2jKYFFzy8+JCa4HYMKXkItblclRbMVESle2EPSfqsvD/X7s2gKRlEV q9sb6Cp8BA1NX121h23IClkj+tWDqxgkp4cV/3bGULW+JeObwbiR7ZBH3T1HiTLF sqkv6/MkcS2heNBajEchXkjexGavyHxMxqO/mcvr6erFGXrxyYXFQ5LqTxjqw997 30QbtcRQz0L1N8dXeV65PIiBxfsgZdGzPx8UReQM7mP9/DOEoqCnjbDBbkknWb9/ 7vWdAcI8/J6gVcx/bBDX9EECAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 298571395527119424911345257145400697134407 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-03 19:13:22 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-01 19:13:22 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.ianchan.dev' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 980112334534078442681906848281278469569342698391823607032156263682115634068894481537812996266325018262879982730470062683622046238428008775832521945245023082138742823485684702381696025452002340612217590121307572095206335680789945337407786244813903905826636857365909921309540140646484943687377965576596042698297570103390106533060817109987050140583437127170265292049515238349478851848185259424443211957451704802936967975220850784977348454135230276226607073179077820710466827320347619914710830822824076271746083506962927808770775784908120912568411388183160903080279738197579015687298025490045581927375760123474731985436818326072291104605496757383915038952334263677083626541072825969063632045673879461245092560356515238891858434636832073089011231934216867898365522270277425874527574204964593583879746061826066296156670717439356314915309525160170577937214464451822114238813034338404077627107658699579706564704051227624402328398048842137761883447807593022853104671670215154578693347580197999949469324376517073690221491660684051867028218989358669896557827058363055516832569233348819844597520905203432071730460894665687146115059959491653702115519386856494202989314623778547208820822456156471262959169045086051824800768590326637361094288995393 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 927fa27f98aa0c878e6365a4d1eb5949d1b8471d . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ianchan.dev' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007500f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016d934170bf00000403004630440220033128dbacbb9fb606ac20d3049514163737907da787d7047d0a1a480add4e50022006cced3e16d2b70f5154c9ee0f057d5983978bb523582e7f815287c4410a6230007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016d934170e80000040300473045022100e1fe09dd52d24ecbe3464a99f6be657aa9339294bee38c8f95c4b34747e53c7e022066b3263fe1bc282fddf19cdb5752bf588b84d93ab3cc076083768e204cb51a6d . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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