investpie.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:d7:89:b1:f4:12:7b:5c:74:43:b1:17:56:21:b8:1b:3a:7e was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=investpie.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:d7:89:b1:f4:12:7b:5c:74:43:b1:17:56:21:b8:1b:3a:7eSerial Number (int): 334680594905621232366266286708276541995646
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: b2:63:16:89:ed:a4:5e:0f:1c:7a:55:71:72:42:58:7c:f1:84:07:00
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 7e:bf:8b:1e:04:42:6a:22:42:80:0e:d2:c0:ca:0b:69:bf:a6:d2:83
Fingerprint (sha256): 05:db:14:28:07:f0:f6:4b:c7:40:6b:8e:9b:ec:d5:29:cd:85:08:30:27:89:84:7a:5a:1f:99:af:5e:ba:b8:78
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate investpie.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for investpie.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
investpie.com
www.investpie.com
www.investpie.com
Other certificates including the domain name investpie.com
(limited to 100 certificates)
investpie.com
investpie.com
eph28.com
rxgreat.com.investpie.com
stemdenver.org
indychinese.church
jameskrogers.org
investpie.com
capdelic.com
www.investpie.com
tilona.com
www.vanillacherry.com
rollups.vc
investpie.com
kvpentertainers.ca
www.investpie.com
bdc.vc
newinternationalversion.bible
www.rxsugar.fr.norwoodwaterworks.ca
investpie.com
eph28.com
rxgreat.com.investpie.com
stemdenver.org
indychinese.church
jameskrogers.org
investpie.com
capdelic.com
www.investpie.com
tilona.com
www.vanillacherry.com
rollups.vc
investpie.com
kvpentertainers.ca
www.investpie.com
bdc.vc
newinternationalversion.bible
www.rxsugar.fr.norwoodwaterworks.ca
Certificate
The complete raw certificate details for investpie.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGZDCCBUygAwIBAgISA9eJsfQSe1x0Q7EXViG4Gzp+MA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA5MjYyMjEzMTRaFw0x OTEyMjUyMjEzMTRaMBgxFjAUBgNVBAMTDWludmVzdHBpZS5jb20wggIiMA0GCSqG SIb3DQEBAQUAA4ICDwAwggIKAoICAQDsUomwd5siI6Y2r9nzFlHDBvh+Ra+EkO5u VyP7Lz/o7lzsyri1PxMe81ponY5kJGC1ByL0mOO8/6xiDtdVjBDNKFaMigzSUt3H dJH4TuwHx0X75LuyUrT280crXePMrXxVL68GCj/QRmJgnhMtPdZ7dBaR0kOopU1z ERbu9fX2cB4T0gyLfSkdOqajuWnHguJQVPdogstdi3Ii7SZuM4GSj5KAaTGTMkKh KJIQYDMS+CsZKEkzQcLIyZGz8tbBg1BvDojEbY4I6jIPjLYsnO9aIzpO125k9Skm IstVn9Oe7B98lrbzo4gZZZnjH4FRItYJEYG/8Sg2zQyX7CoHfo9eMs7L+R7Zv6cU kV4E8b1XKHI5e/QKCr79ycKQM+dX5LOII0fK4jBtmAUqwrC4e3cEFU5EXsQ1VWHJ YYQBVQtjXcY8ZdMTRENVa0uG2w7SkAdDfCl2SlDZPth3Au+yR4ThW3vkbnvZiiq0 0NdKG+06HXxxpZSWC9IZauKZP8rI8ejNECpqoItaQQPsLXtfFVZrMVDVzV7GB0B8 mgGf7bOT801bX2igGf2ZNmhEUGpiaaogYue0AUXEcpATCeLmnZmeZMO9KWfna40Z /7PsaKQjw01FZstrRfKINfvcOU47DScv/M87xsBU+0nJm+M9zTFzBH1364qsR3Zh ZeskLB9CgQIDAQABo4ICdDCCAnAwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQG CCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBSyYxaJ 7aReDxx6VXFyQlh88YQHADAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86js oTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14 My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14 My5sZXRzZW5jcnlwdC5vcmcvMCsGA1UdEQQkMCKCDWludmVzdHBpZS5jb22CEXd3 dy5pbnZlc3RwaWUuY29tMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8T AQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIB AwYKKwYBBAHWeQIEAgSB9ASB8QDvAHYAdH7agzGtMxCRIZzOJU9CcMK//V5CIAjG NzV55hB7zFYAAAFtb9mXxwAABAMARzBFAiAs/80U6YoXteCn7DYOIH+RBmQ99PEB 57FqJlaw5juFgwIhAKk8UHYW7HeibYBGDvVulWgC5Gq5midHvZwkquAc7aScAHUA KTxRllTIOWW6qlD8WAfUt2+/WHopctykwwz05UVH9HgAAAFtb9mX4AAABAMARjBE AiAEb5RpIlD9ElX+EzpfdzxMBA2W8sDn9z7DYOM0kp9iMwIgdQQdlNerRpMCpXNw S6iWGkbySnj46cwmYbWgOGJi0r0wDQYJKoZIhvcNAQELBQADggEBAAiTxT34O/qX zVqZF4jTIuXKMk+fhxX0UWRolU0Lv1zTfNZiKK2ob03+yXSyUBLNqiKs4531qRd0 /Ie/IGDWLgFh52GFEpHjF1tC8OPH79SyncEiCpcORxPaQ8ot4EbN/oAlOh64hptg U0pLaYQlQiPOhFI0QEeheB8MEc7LFHsLvx8YTtUhFv6bm0cUEqFaAALOVaSiUMte TusybHS8xr6dTLvnqK6RPebolk8ZCji9P8nuSNaFtyx4iEcK/hutRtLqmNlGkMuu 3cWLcbpNTzktUptdidfvm7QCZlRsd5sOM9NDpucpRqHr25MPpZzVMyOy4WjG4CS/ RpsKKINOc+k= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA7FKJsHebIiOmNq/Z8xZR wwb4fkWvhJDublcj+y8/6O5c7Mq4tT8THvNaaJ2OZCRgtQci9JjjvP+sYg7XVYwQ zShWjIoM0lLdx3SR+E7sB8dF++S7slK09vNHK13jzK18VS+vBgo/0EZiYJ4TLT3W e3QWkdJDqKVNcxEW7vX19nAeE9IMi30pHTqmo7lpx4LiUFT3aILLXYtyIu0mbjOB ko+SgGkxkzJCoSiSEGAzEvgrGShJM0HCyMmRs/LWwYNQbw6IxG2OCOoyD4y2LJzv WiM6TtduZPUpJiLLVZ/TnuwffJa286OIGWWZ4x+BUSLWCRGBv/EoNs0Ml+wqB36P XjLOy/ke2b+nFJFeBPG9VyhyOXv0Cgq+/cnCkDPnV+SziCNHyuIwbZgFKsKwuHt3 BBVORF7ENVVhyWGEAVULY13GPGXTE0RDVWtLhtsO0pAHQ3wpdkpQ2T7YdwLvskeE 4Vt75G572YoqtNDXShvtOh18caWUlgvSGWrimT/KyPHozRAqaqCLWkED7C17XxVW azFQ1c1exgdAfJoBn+2zk/NNW19ooBn9mTZoRFBqYmmqIGLntAFFxHKQEwni5p2Z nmTDvSln52uNGf+z7GikI8NNRWbLa0XyiDX73DlOOw0nL/zPO8bAVPtJyZvjPc0x cwR9d+uKrEd2YWXrJCwfQoECAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 334680594905621232366266286708276541995646 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-26 22:13:14 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-25 22:13:14 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'investpie.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 964111332262741698510587151098858673622886917217072500534775228580565159579206953378143243698122803285493206253426844576567860161775489249591054596531068659124104337592083088801070791223667876086874006282539209237291432023358348406964465399810548202095492492170053028600548896752730965425144255573942409308934217779741953854999517431305645977130154338435733847265118185270061886239239235841528685067086177323888008782372182645122212297927527015452324315883185425541802629123435030087207045939169372444390679540899155449432069293263880950537541638358515116979524123313901250327315428738189850198915584871819224996432574095028262573168163030359207997303803340265943430310769115728688859258487620971617079984772323332408412764105705239451306680299727392903005907782792855757029663719419569667349946481899850642680925072556607704174552423232188344641685656478255044770476549856929449095446290450744880976630130350838588443347521973898378810967382510786486112216981529493436105643268261874652054754799409973890787543932237229076204720950968513173085740580245437405062014942049493859472315635087043666268824054890921139099130344014336550039638654672862712044309882964365147242387019731463923306661440072641000273962057957051252671250383489 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) b2631689eda45e0f1c7a55717242587cf1840700 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investpie.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.investpie.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016d6fd997c7000004030047304502202cffcd14e98a17b5e0a7ec360e207f9106643df4f101e7b16a2656b0e63b8583022100a93c507616ec77a26d80460ef56e956802e46ab99a2747bd9c24aae01ceda49c007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016d6fd997e000000403004630440220046f94692250fd1255fe133a5f773c4c040d96f2c0e7f73ec360e334929f6233022075041d94d7ab469302a573704ba8961a46f24a78f8e9cc2661b5a0386262d2bd . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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