samplemarijuana.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:22:1d:95:e3:cb:ca:16:ec:f4:57:19:86:cc:72:c9:39:ed was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=samplemarijuana.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:22:1d:95:e3:cb:ca:16:ec:f4:57:19:86:cc:72:c9:39:edSerial Number (int): 272945784154955172653919858309208778291693
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 08:ca:0a:83:54:7e:b7:76:31:d5:75:9e:54:92:7f:94:4b:24:ec:15
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 8e:f2:84:11:75:f4:21:8b:e5:84:98:0d:35:e7:dd:56:4e:a6:55:e9
Fingerprint (sha256): 0c:20:7f:d0:c0:4d:70:75:ca:34:2a:d1:38:2c:44:ab:cd:47:cd:4a:54:b2:7c:f7:9b:c9:f7:36:67:6e:de:4a
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate samplemarijuana.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for samplemarijuana.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
samplemarijuana.com
www.samplemarijuana.com
www.samplemarijuana.com
Other certificates including the domain name samplemarijuana.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for samplemarijuana.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGeTCCBWGgAwIBAgISAyIdlePLyhbs9FcZhsxyyTntMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA5MjAyMTU5NDZaFw0x OTEyMTkyMTU5NDZaMB4xHDAaBgNVBAMTE3NhbXBsZW1hcmlqdWFuYS5jb20wggIi MA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCixukgtGhNK4H4Fp81Yn3kpbyf Wfz4cBCXZw6JQYOvbRFROCaflwDhnw6A4nO6FZlYBKdR0PQBJVAO2Qe5kWh3hUdH crJ0KsH0Nxtda/D4Mg4sY5ixo+LH79x617U4mvXDIcJG7AUP0jV6z/BcqGKo+026 ylQIS2+3Fu1Nprd1u2+eSsPLDG3k6brYdyjTOziJttkrNFj5SN9i3282yr0V+am/ 1R8lkqe5A0PAvchoz7uFFCT0o64z0FaNd7d0oRjBWTZaiJc+salWyVN0hcPILBTC Z9AeOj9C+ysvzyR0ThhezjLtmarvrSmF5wyIPmBoClXablXJojNPCvYAwVx69Pb9 FvTi0FqKXesvyt0qqFHOrBqe0V+Yj7KLbVpXBO68wfEN/7KhpIJjN77ruRnUvCC0 Oziq8yZCfxXPnul1EKzyUF2iSWpn8thA+gXYU6tThVnnGXhaNkboKuExeKqRP1iI coPbFRjxouipB42RuOqkF1OGUUkXAvcAHBzs7tjeMG8BWUDXuzuEbEj1l6R7opVd 6MQSh9YmjYqPLE5abNWayl1Y59WSQAMCUvkRlQPpt9e3DGJNhFY0sO9/NpJ0ymmA AORZhnCWITPtwjNcEMRdFgBhzirmsRsyRKW9Xonk0yMjO46mwHz8rygxIpDhdO0F 8B6oONn1371b0vF7zwIDAQABo4ICgzCCAn8wDgYDVR0PAQH/BAQDAgWgMB0GA1Ud JQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQW BBQIygqDVH63djHVdZ5Ukn+USyTsFTAfBgNVHSMEGDAWgBSoSmpjBH3duubRObem RWXv86jsoTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3Nw LmludC14My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0 LmludC14My5sZXRzZW5jcnlwdC5vcmcvMDcGA1UdEQQwMC6CE3NhbXBsZW1hcmlq dWFuYS5jb22CF3d3dy5zYW1wbGVtYXJpanVhbmEuY29tMEwGA1UdIARFMEMwCAYG Z4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMu bGV0c2VuY3J5cHQub3JnMIIBBgYKKwYBBAHWeQIEAgSB9wSB9ADyAHcA4mlLribo 6UAJ6IYbtjuD1D7n/nSI+6SPKJMBnd3x2/4AAAFtUOceLAAABAMASDBGAiEAhOLm /XJ4p7EAY4l0Wf88E0hfjDLwpbneATRCiEmP8HECIQCbEHW+t03G/F5QJHwUWUHL OXkONZQQ8aONiyEqWBgsMgB3ACk8UZZUyDlluqpQ/FgH1Ldvv1h6KXLcpMMM9OVF R/R4AAABbVDnHh0AAAQDAEgwRgIhAKUGAekhmUXlNRD3ip5fDeghYS3xPnzWGEdp NSnHhXnbAiEAliZB6H7etGKNhOYI/vygTmPDvujR9AGiufXP65Mz4PYwDQYJKoZI hvcNAQELBQADggEBAFEPAiofePXEMolo5wfepOsvmy0WuNqVglAxWeOm5mEMw3nP sIysCaUT4hZnPU8BbZvZ4fjYkf8A/uZS3xWTsk5v/ZOwLYh8YJwN7SVqCvTDOLJD cTmSMA7Kby5L1ZrMp6c23iP5YuErOLizmSfP3y7LIM0sqawTxVR0oKKfs998Bp7Q YIL5wn30b6tZ18+DYyxW+oxYK8vInl3vEqlZsMJkqZW4mUL+rVc8mVz1h+xGDHIU eR+ICAo0pI95a5v4+r1EYIiSx9S2xjyDt02p07Su2VY4c+qjY4wtlBb7brd0rv8m RIekVWbEug5pjoBYAISjvwrOAz4wi+KkeE4xAec= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAosbpILRoTSuB+BafNWJ9 5KW8n1n8+HAQl2cOiUGDr20RUTgmn5cA4Z8OgOJzuhWZWASnUdD0ASVQDtkHuZFo d4VHR3KydCrB9DcbXWvw+DIOLGOYsaPix+/cete1OJr1wyHCRuwFD9I1es/wXKhi qPtNuspUCEtvtxbtTaa3dbtvnkrDywxt5Om62Hco0zs4ibbZKzRY+UjfYt9vNsq9 Ffmpv9UfJZKnuQNDwL3IaM+7hRQk9KOuM9BWjXe3dKEYwVk2WoiXPrGpVslTdIXD yCwUwmfQHjo/QvsrL88kdE4YXs4y7Zmq760phecMiD5gaApV2m5VyaIzTwr2AMFc evT2/Rb04tBail3rL8rdKqhRzqwantFfmI+yi21aVwTuvMHxDf+yoaSCYze+67kZ 1LwgtDs4qvMmQn8Vz57pdRCs8lBdoklqZ/LYQPoF2FOrU4VZ5xl4WjZG6CrhMXiq kT9YiHKD2xUY8aLoqQeNkbjqpBdThlFJFwL3ABwc7O7Y3jBvAVlA17s7hGxI9Zek e6KVXejEEofWJo2KjyxOWmzVmspdWOfVkkADAlL5EZUD6bfXtwxiTYRWNLDvfzaS dMppgADkWYZwliEz7cIzXBDEXRYAYc4q5rEbMkSlvV6J5NMjIzuOpsB8/K8oMSKQ 4XTtBfAeqDjZ9d+9W9Lxe88CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 272945784154955172653919858309208778291693 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-20 21:59:46 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-19 21:59:46 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'samplemarijuana.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 664072201030576504130293857165434123919950148396083939577285978886279035591763825080891723226728380782904254841167081510286649921313713267107738587492216498680953148834588193089292369338539754195842796085554243190195530779434140907182867639481902663337516627881040001468675777200741681820749835779556398126043327774757961024334992664514254256080909636676838108776983429147680379784703028643336448028253938206343254361958450362196614510415670185943845222349550306737730399370961825694837409865596861460572294629419075167207283522961368917352197211918328609084566414653839501303672567937375250933672430948389074717183882120903568352956316986777949570135148041018902819096979836342349693019106242844222822770573799621640069240517974425926985998905139309177241696743488114658049050412839032167266420040150663191669342559653365199453163520400345158531157749705219019159553073237296105388489202114865885618994542939696211187934051474956806585661706441988023078325987060137514691120270829328952723133239596743153563344829554668226217800595705610009145269828965031011538371086388069200902133080714545577733124093424091459846042924404239533662258269912907390758479346992301756683156073700909865967432689394820737694376849379676113339575008207 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 08ca0a83547eb77631d5759e54927f944b24ec15 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'samplemarijuana.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.samplemarijuana.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) 00f2007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016d50e71e2c000004030048304602210084e2e6fd7278a7b10063897459ff3c13485f8c32f0a5b9de01344288498ff0710221009b1075beb74dc6fc5e50247c145941cb39790e359410f1a38d8b212a58182c32007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016d50e71e1d0000040300483046022100a50601e9219945e53510f78a9e5f0de821612df13e7cd61847693529c78579db022100962641e87edeb4628d84e608fefca04e63c3bee8d1f401a2b9f5cfeb9333e0f6 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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