social.techcrunch.com
Issued by R3
About this certificate
This digital certificate with serial number 03:2f:1d:1c:2a:27:e6:8f:a7:88:b6:f9:a8:a9:f2:a7:1e:bf was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=social.techcrunch.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:2f:1d:1c:2a:27:e6:8f:a7:88:b6:f9:a8:a9:f2:a7:1e:bfSerial Number (int): 277368822891777106169372840133335118716607
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 66:5c:e3:b3:9e:26:e5:35:2a:07:c6:50:c5:d8:78:f9:54:e9:8a:81
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): af:61:37:af:28:e0:a6:ac:2b:1b:ae:fd:a0:ff:00:b3:eb:80:7e:ea
Fingerprint (sha256): 08:52:58:09:28:2e:cf:54:1b:74:35:30:3b:77:e3:90:9d:77:20:4d:2c:aa:e0:a1:4c:5b:ed:6a:ee:42:61:32
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate social.techcrunch.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for social.techcrunch.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
social.techcrunch.com
Other certificates including the domain name techcrunch.com
(limited to 100 certificates)
login.yahoo.com
*.stage.login.yahoo.com
link.techcrunch.com
ceros3.map.fastly.net
link.techcrunch.com
email.crunchmatch.techcrunch.com
jp.techcrunch.com
*.aol.com
email.crunchmatch.techcrunch.com
ryot.techcrunch.com
ceros3.map.fastly.net
matchmaking03.grip.events
n.main.welcomescreen.aol.com
matchmaking.grip.events
*.login.yahoo.com
eu.techcrunch.com
email.crunchmatch.techcrunch.com
link.techcrunch.com
social.techcrunch.com
mailing.techcrunch.com
fr.techcrunch.com
unitag.techcrunch.com
jp-preprod.techcrunch.com
jp.techcrunch.com
jp.techcrunch.com
future.techcrunch.com
techcrunch.com
stage.guce.oath.com
networking.techcrunch.com
*.aol.com
preprod.techcrunch.com
*.pinterestceros.com
dev.search.yahoo.com
ceros3.map.fastly.net
*.answers.search.yahoo.com
social.techcrunch.com
jp.techcrunch.com
stage.guce.oath.com
stage.guce.oath.com
jp.techcrunch.com
*.yahoo.com
jp-preprod.techcrunch.com
develop22.techcrunch.com
b.aol.com
stage.oidc.oath.com
beta.techcrunch.com
social.techcrunch.com
*.stage.login.yahoo.com
*.aol.com
www.techcrunch.com
jp.techcrunch.com
*.yahoo.com
*.yahoo.com
*.trunk.login.yahoo.com
social.techcrunch.com
prod22.techcrunch.com
matchmaking.grip.events
jp.techcrunch.com
matchmaking03.grip.events
*.search.yahoo.com
login.yahoo.com
ceros3.map.fastly.net
stage.oidc.oath.com
mailing.techcrunch.com
www.intheknow.com
trunk.guce.oath.com
trunk.guce.oath.com
link.techcrunch.com
matchmaking03.grip.events
*.stage.login.yahoo.com
oidc.oath.com
login.yahoo.com
ceros3.map.fastly.net
dev.search.yahoo.com
email.crunchmatch.techcrunch.com
matchmaking03.grip.events
ceros3.map.fastly.net
ceros3.map.fastly.net
link.techcrunch.com
*.pinterestceros.com
preprod.techcrunch.com
techcrunch.com
jp.techcrunch.com
trunk.login.yahoo.com
stage.guce.oath.com
email.crunchmatch.techcrunch.com
*.login.yahoo.com
login.yahoo.com
info.techcrunch.com
jp.techcrunch.com
*.login.yahoo.com
www.techcrunch.com
develop.techcrunch.com
preprod22.techcrunch.com
stage.guce.oath.com
www.intheknow.com
jp-preprod.techcrunch.com
*.aol.com
beta.techcrunch.com
*.search.yahoo.com
*.stage.login.yahoo.com
link.techcrunch.com
ceros3.map.fastly.net
link.techcrunch.com
email.crunchmatch.techcrunch.com
jp.techcrunch.com
*.aol.com
email.crunchmatch.techcrunch.com
ryot.techcrunch.com
ceros3.map.fastly.net
matchmaking03.grip.events
n.main.welcomescreen.aol.com
matchmaking.grip.events
*.login.yahoo.com
eu.techcrunch.com
email.crunchmatch.techcrunch.com
link.techcrunch.com
social.techcrunch.com
mailing.techcrunch.com
fr.techcrunch.com
unitag.techcrunch.com
jp-preprod.techcrunch.com
jp.techcrunch.com
jp.techcrunch.com
future.techcrunch.com
techcrunch.com
stage.guce.oath.com
networking.techcrunch.com
*.aol.com
preprod.techcrunch.com
*.pinterestceros.com
dev.search.yahoo.com
ceros3.map.fastly.net
*.answers.search.yahoo.com
social.techcrunch.com
jp.techcrunch.com
stage.guce.oath.com
stage.guce.oath.com
jp.techcrunch.com
*.yahoo.com
jp-preprod.techcrunch.com
develop22.techcrunch.com
b.aol.com
stage.oidc.oath.com
beta.techcrunch.com
social.techcrunch.com
*.stage.login.yahoo.com
*.aol.com
www.techcrunch.com
jp.techcrunch.com
*.yahoo.com
*.yahoo.com
*.trunk.login.yahoo.com
social.techcrunch.com
prod22.techcrunch.com
matchmaking.grip.events
jp.techcrunch.com
matchmaking03.grip.events
*.search.yahoo.com
login.yahoo.com
ceros3.map.fastly.net
stage.oidc.oath.com
mailing.techcrunch.com
www.intheknow.com
trunk.guce.oath.com
trunk.guce.oath.com
link.techcrunch.com
matchmaking03.grip.events
*.stage.login.yahoo.com
oidc.oath.com
login.yahoo.com
ceros3.map.fastly.net
dev.search.yahoo.com
email.crunchmatch.techcrunch.com
matchmaking03.grip.events
ceros3.map.fastly.net
ceros3.map.fastly.net
link.techcrunch.com
*.pinterestceros.com
preprod.techcrunch.com
techcrunch.com
jp.techcrunch.com
trunk.login.yahoo.com
stage.guce.oath.com
email.crunchmatch.techcrunch.com
*.login.yahoo.com
login.yahoo.com
info.techcrunch.com
jp.techcrunch.com
*.login.yahoo.com
www.techcrunch.com
develop.techcrunch.com
preprod22.techcrunch.com
stage.guce.oath.com
www.intheknow.com
jp-preprod.techcrunch.com
*.aol.com
beta.techcrunch.com
*.search.yahoo.com
Certificate
The complete raw certificate details for social.techcrunch.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEBDCCAuygAwIBAgISAy8dHCon5o+niLb5qKnypx6/MA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzExMDkyMzU3NDVaFw0yNDAyMDcyMzU3NDRaMCAxHjAcBgNVBAMT FXNvY2lhbC50ZWNoY3J1bmNoLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCC AQoCggEBAKTxGkU4L2BfjWEdUwxXAtDyF5EGrZRU3HNqAWE3U1l7ym7rwZDy0QYF pY9IOwDW1pN9UUv3WtGT/cd/KBZqnx5obGZdfW1+btwSkOJlJDFm4mgg8CFGlNRW Z7vYDvUH1MglC87g7uv+jNmb32dOHnzaFRmXHG1h17JXHr54n9HmhnFJliF4j0xT 08FYT/6KIFsOJoQBQJ/BI2v+H108dqkrV7e5cJQSh5NI1hk1cKsIqYjqPKarEko3 RAW++kYptglagS8vUMURy0izobyZCBd6H03hSl38S4ifcHHoMo0Sy5v1sgE2FqJN kxeer3q8OYDEADYmZPwaPrU/rDXBIwcCAwEAAaOCASQwggEgMA4GA1UdDwEB/wQE AwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIw ADAdBgNVHQ4EFgQUZlzjs54m5TUqB8ZQxdh4+VTpioEwHwYDVR0jBBgwFoAUFC6z F7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVo dHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxl bmNyLm9yZy8wIAYDVR0RBBkwF4IVc29jaWFsLnRlY2hjcnVuY2guY29tMBMGA1Ud IAQMMAowCAYGZ4EMAQIBMBMGCisGAQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEe6h6VoPc53Uwq1LTgAV8ZEvczZL/jFpQm2CmJ35Y7hzrwBLqCmeg CDycIYS2q/IjlLMot3U5T/iOO/S4lqD/wglFL//ooOmpumGsrVdSl4JnV5bBQ2Md dZufvZyh4+u8KR6MTcIf5oo3xLbtjouTlOA0bZNlx61NL5ckEWAEuLeDMuHe1g1a MF5OVvNt6FaaJ7KrHWrBs/NzFXi98BsOm4rLWIufJhOHO46/g+dy1Hg0e8B+6sNV JUP5tl6bX8rmGAjMQ05k4L5He0iBHAn4I4+YIQrdy+Qlif5OgMh6D6IC3L5dnR6/ bI163uYs45l6YrF7GNDupww0CkLbkW0r -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApPEaRTgvYF+NYR1TDFcC 0PIXkQatlFTcc2oBYTdTWXvKbuvBkPLRBgWlj0g7ANbWk31RS/da0ZP9x38oFmqf HmhsZl19bX5u3BKQ4mUkMWbiaCDwIUaU1FZnu9gO9QfUyCULzuDu6/6M2ZvfZ04e fNoVGZccbWHXslcevnif0eaGcUmWIXiPTFPTwVhP/oogWw4mhAFAn8Eja/4fXTx2 qStXt7lwlBKHk0jWGTVwqwipiOo8pqsSSjdEBb76Rim2CVqBLy9QxRHLSLOhvJkI F3ofTeFKXfxLiJ9wcegyjRLLm/WyATYWok2TF56verw5gMQANiZk/Bo+tT+sNcEj BwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 277368822891777106169372840133335118716607 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-09 23:57:45 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-07 23:57:44 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'social.techcrunch.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20821974146887674872611867953961385423610369807491477197646140179873560602882615369809432800566972865322998538550131717595003263156673488857668374853087733066694578525406726915909178700918627139429259610959110981244588314711397716447837556848043878371793626572374987023424374127939199640547055155154772282444361394486525843666838156235088871568570403254536373156599673382623552233020110138167498484654413980670447037150592120721561695308970217256228384672037122482721668546309438131793128401172369741845752505885239715064933317279619448020210015453910176328409921921704372811106250673538437376620803551167303276110599 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 665ce3b39e26e5352a07c650c5d878f954e98a81 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'social.techcrunch.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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