chicagooglasi.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:63:d5:5e:c5:25:0f:55:77:50:dd:69:22:37:05:6c:72:8c was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=chicagooglasi.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:63:d5:5e:c5:25:0f:55:77:50:dd:69:22:37:05:6c:72:8cSerial Number (int): 295308429758031416707173524150077241455244
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 06:87:04:91:38:16:f5:f7:5f:51:5e:51:8e:4c:5d:23:71:f8:e4:bf
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 77:90:8a:1a:2b:4d:53:13:6b:32:6a:1d:75:ce:18:9f:8d:17:0a:21
Fingerprint (sha256): 0f:5d:65:ea:3a:b7:32:a5:37:db:a9:a1:91:3f:27:d5:2b:39:33:ee:f6:78:9b:ff:94:dc:69:99:c1:0f:e1:17
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate chicagooglasi.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for chicagooglasi.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
chicagooglasi.com
www.chicagooglasi.com
www.chicagooglasi.com
Other certificates including the domain name chicagooglasi.com
(limited to 100 certificates)
chicagooglasi.com
cheapcarinsuranceinphoenix.com
cheapcarinsuranceinphoenix.com
chicagooglasi.com
chicagooglasi.com
cheapcarinsuranceinphoenix.com
chicagooglasi.com
cheapcarinsuranceinphoenix.com
cheapcarinsuranceinphoenix.com
chicagooglasi.com
chicagooglasi.com
cheapcarinsuranceinphoenix.com
chicagooglasi.com
cheapcarinsuranceinphoenix.com
cheapcarinsuranceinphoenix.com
chicagooglasi.com
chicagooglasi.com
cheapcarinsuranceinphoenix.com
chicagooglasi.com
cheapcarinsuranceinphoenix.com
cheapcarinsuranceinphoenix.com
chicagooglasi.com
chicagooglasi.com
cheapcarinsuranceinphoenix.com
chicagooglasi.com
Certificate
The complete raw certificate details for chicagooglasi.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGcDCCBVigAwIBAgISA2PVXsUlD1V3UN1pIjcFbHKMMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA1MTYyMzM3MjNaFw0x OTA4MTQyMzM3MjNaMBwxGjAYBgNVBAMTEWNoaWNhZ29vZ2xhc2kuY29tMIICIjAN BgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA1f1KakES2e52swGDipa20zjpkSWW NWFCze9gvIJYLDrBD9/PzgNuvDfHcy+UbkJ1jZFy1oj1XICD/WVu7ktaNkEXxwj8 Dbvy5oFs9k0ChoZwkmfKj4tkfOfyFtcl/rBHHVs4UFcDLVUCPQyzAzUb8NR5+9Eh eWgV6a7HpQbg5iJM9iWJpg12kBgEEk9Nx0LEnzCD0CMfWgIojv/VcRKpI8k76F+d 7CofkhdHWDKcWkctktha/QfpckAwJW1qR/a3yFay9AGvMb51Nuxl/4webXI68dZp G2H71Rar7mW64fReaNKM/kOku3vMJI1IUAcYBMLJ7ljEyOOClGs77d/pCavpUhJS hLVvLF8cwHxeR9HN0i/EwmuSsb2PEvAYhCHDFBjJocL5eiMEJeCsUd1N6zMo24Bl Okf4Hpx9CnLN/qHw9xOYl18+LY0axKd513L6GTiuU91D8u2oxO0zD70J9GxfPsFW bUBSdNY42qrZLP96JViLgdwTFw7/hgQaoyhbnCRxAvHtYpwEVZc02Za9ImHW6LCP INdXpJSMTveEUkYL7VfJU6aJKE71EDDix+0ELxK8NNoijeR3wTdmhDoLw1PgDrYW p2vq3Mv/DrhTYFvesK1gPGXrxd4ZifUD7mCBwp8u4EFamFDKry+LaK39/UR7Mdq+ ZY+23v5+iQFY+GcCAwEAAaOCAnwwggJ4MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUE FjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU BocEkTgW9fdfUV5RjkxdI3H45L8wHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl 7/Oo7KEwbwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5p bnQteDMubGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5p bnQteDMubGV0c2VuY3J5cHQub3JnLzAzBgNVHREELDAqghFjaGljYWdvb2dsYXNp LmNvbYIVd3d3LmNoaWNhZ29vZ2xhc2kuY29tMEwGA1UdIARFMEMwCAYGZ4EMAQIB MDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2Vu Y3J5cHQub3JnMIIBAwYKKwYBBAHWeQIEAgSB9ASB8QDvAHYA4mlLribo6UAJ6IYb tjuD1D7n/nSI+6SPKJMBnd3x2/4AAAFqwzjaLAAABAMARzBFAiBtgADUZLpR4Ra8 /+P9Yvueys9Tp/Wnv45Y5MUdZ2cH4gIhAOPs25dyuPCaP8RQniGbPtta+ZURjiTF zDD8j9+E1NeLAHUAKTxRllTIOWW6qlD8WAfUt2+/WHopctykwwz05UVH9HgAAAFq wzjYXAAABAMARjBEAiB0hkYVQ8Eb6b7xCuCyqsUAkleHb2qUjhpC1rhJBa768QIg Qhn3V7S7X/MMyzJTdKQFww6ezf9dPSWkgug/lBTaYVQwDQYJKoZIhvcNAQELBQAD ggEBABeZJ1o+FL6P5NvHbL5Wqch7UqJSL49hpBQYbYAMHSk1Hz0ALseRd0WekajY X2SETWKdnxozNaVV0QtQdY8R2B+vKVDcuUIexuAYeSdeW8TQqSEiyaZTaHOsM5uE 7iwnQg3/q/3QaXXvU022PFGaDYX/szrq0HDaFCiGsej4JaslyWBEZApEPCjnwGwX 6YgxvYVY8NpG3Iql2vpBprJRn66PTn0Epof2Clt3FEXG4I8vE5MzEm8ZTfEhOGew Xccg37ulZQgRf3kply5RHjNQMqyuo+Dk6SnQYe0/JPOFieaV917/7O/mCKexxpe3 eOA33Q7gUslC/6pShGMuLFH+F+8= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA1f1KakES2e52swGDipa2 0zjpkSWWNWFCze9gvIJYLDrBD9/PzgNuvDfHcy+UbkJ1jZFy1oj1XICD/WVu7kta NkEXxwj8Dbvy5oFs9k0ChoZwkmfKj4tkfOfyFtcl/rBHHVs4UFcDLVUCPQyzAzUb 8NR5+9EheWgV6a7HpQbg5iJM9iWJpg12kBgEEk9Nx0LEnzCD0CMfWgIojv/VcRKp I8k76F+d7CofkhdHWDKcWkctktha/QfpckAwJW1qR/a3yFay9AGvMb51Nuxl/4we bXI68dZpG2H71Rar7mW64fReaNKM/kOku3vMJI1IUAcYBMLJ7ljEyOOClGs77d/p CavpUhJShLVvLF8cwHxeR9HN0i/EwmuSsb2PEvAYhCHDFBjJocL5eiMEJeCsUd1N 6zMo24BlOkf4Hpx9CnLN/qHw9xOYl18+LY0axKd513L6GTiuU91D8u2oxO0zD70J 9GxfPsFWbUBSdNY42qrZLP96JViLgdwTFw7/hgQaoyhbnCRxAvHtYpwEVZc02Za9 ImHW6LCPINdXpJSMTveEUkYL7VfJU6aJKE71EDDix+0ELxK8NNoijeR3wTdmhDoL w1PgDrYWp2vq3Mv/DrhTYFvesK1gPGXrxd4ZifUD7mCBwp8u4EFamFDKry+LaK39 /UR7Mdq+ZY+23v5+iQFY+GcCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 295308429758031416707173524150077241455244 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-16 23:37:23 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-14 23:37:23 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'chicagooglasi.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 873000654596457286079626220332196770854980123663716630204830340922598148191244986852996182385704731521657713872542978047741011164200240507512331792031644245051485610461090910436198762306400379261235305685593747015038426213741216492313770908034938288375739334193801927897742405988799696407530257627320389652183089396574685395570079760326052130764199638230936805468455645834763942680856179593598548825574746739214665788800192299719459959813319068725255498526696238331498857314349505449685678955966884083516734189997480901574882662156751009399606399910214053302422153631434240078948941390808462448380240570698570218491985897483155732568460466719426767774189390451307613746541179719368813902712422054310034961006920101421209828415238184109598945993228627626798009585601094670967524517413582483349043987130935479524338078246099375468885276044551759077916513947962426238424557279213962277271360890378639151997169554823155538954404539824651884389121049230637014157981280200867828760886896272907081511201227355121401307415266739200488192604744525106679323417605386836303787140901466328488442917651662940578052142856841485369431442709751456726118024313379443238086575829494215414182759773114715686280878563761570459663641072878306875124807783 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 068704913816f5f75f515e518e4c5d2371f8e4bf . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chicagooglasi.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chicagooglasi.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016ac338da2c000004030047304502206d8000d464ba51e116bcffe3fd62fb9ecacf53a7f5a7bf8e58e4c51d676707e2022100e3ecdb9772b8f09a3fc4509e219b3edb5af995118e24c5cc30fc8fdf84d4d78b007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016ac338d85c000004030046304402207486461543c11be9bef10ae0b2aac5009257876f6a948e1a42d6b84905aefaf102204219f757b4bb5ff30ccb325374a405c30e9ecdff5d3d25a482e83f9414da6154 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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