blug.net
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:29:27:b6:0f:95:e7:79:43:f3:e8:31:9a:2f:26:27:62:a5 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=blug.net
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:29:27:b6:0f:95:e7:79:43:f3:e8:31:9a:2f:26:27:62:a5Serial Number (int): 275341220045015859907132889665431319044773
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 83:7d:11:ae:dd:66:e9:5c:af:92:fb:b0:79:e9:e6:8a:be:4a:09:ff
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 34:36:b2:f9:57:4c:8c:57:e7:a0:8c:57:5e:b5:cc:e3:b5:c4:71:81
Fingerprint (sha256): 10:16:d5:d4:40:7e:00:5d:ef:4e:95:ba:5a:6a:d5:12:c3:8c:15:62:89:a4:1e:56:92:63:44:03:33:a2:5a:6f
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate blug.net
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for blug.net
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
blug.net
Other certificates including the domain name blug.net
(limited to 100 certificates)
Certificate
The complete raw certificate details for blug.net in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgISAykntg+V53lD8+gxmi8mJ2KlMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA3MjcyMDAxMTVaFw0x OTEwMjUyMDAxMTVaMBMxETAPBgNVBAMTCGJsdWcubmV0MIICIjANBgkqhkiG9w0B AQEFAAOCAg8AMIICCgKCAgEAufwGdyIQ3o9NAZZHYKGgIq7tHhS3x0AY1TiPeNm0 kQzDEvRs5z+9DrdEnlaQkOFscEdB+gFUbPe3LEQzNBxy50W1ItJaekLrIHvF6LnH CgRrKsoqmLo7b9Jtw3SLy+N6YHHtRGOxRa0mPBo98sgcyme4bRrHlwGOkuB2WVOi vOhMN9qwJnmLrsU6GSpKkCaj0XASnhdstKDZOyyQWraMKvwIiH+jjUMVCMh20Y5B urIAZ6Botjvl38AIeeC3WfI8xdbzX967MTKklzo1PtCTEV8JggvyCoO8U2baDJwL oUUY7mKHof05Zj36H+gnraxVpFg3i4C0jfmLmTJ8HiWyz9x8cgFqGhroZhdiuHff JCu4NZjGiAOEonQ/zT0T7bk18q907hVo4+8zDYazx5+Ijqb7atUgoaYLa84H+OBb +Ds8z4oJupc7wzJFTIIzwJagTiTG8mHWg8X5LIkqJW9Y5wajlCGPCbvBnn0Amyqu 64PAwLZ+PmPFr0xnD2mLI2f6EjQK21RDOiGJrEzmALkQfMm8K/QU0A7+GJOFP+GR MqfHynteMehyiXFuehyi/WhoX37LVoC9VmQk7A3/hfzOfIhiut+Ja63uxFi3ltfV L/VleJQ1CNzACddmjzC17kMh45wDgNYvwLb40g8QjdJ1gQ9u4Wd6j2lS5NBw2/Of z90CAwEAAaOCAl4wggJaMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEF BQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUg30Rrt1m6Vyv kvuweenmir5KCf8wHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYI KwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0 c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0 c2VuY3J5cHQub3JnLzATBgNVHREEDDAKgghibHVnLm5ldDBMBgNVHSAERTBDMAgG BmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3Bz LmxldHNlbmNyeXB0Lm9yZzCCAQUGCisGAQQB1nkCBAIEgfYEgfMA8QB2AHR+2oMx rTMQkSGcziVPQnDCv/1eQiAIxjc1eeYQe8xWAAABbDU82LAAAAQDAEcwRQIgQcoP EftxEoFvPQJkLDnYRC1CEKsOwt5Ap8tcmApe7rkCIQDdDPXw9PjfHf2DoCdGaLW9 qjyIJe00EBGeUrn5/1twJgB3ACk8UZZUyDlluqpQ/FgH1Ldvv1h6KXLcpMMM9OVF R/R4AAABbDU82J4AAAQDAEgwRgIhAP7O/xzC01EKFF6VZfTa5kPaVUkJ2meY/IOs xSBqeGF/AiEA/MABUU8gOkPuV7SIPdlM6igm7n2wH2uYUvCKnl8W5VYwDQYJKoZI hvcNAQELBQADggEBADBtHrjPLvT49eM95rMkoRtYT1mEvZDKoYCm1AO+tc1nLZ8H Wvn0KcH7y1dkyXp2DmSV6SapKePJw2b97uOK+FsJ1RuBvwVQ1ezFOKCyjoksXF09 EM/SQR6j6ucFYc7eDDepsXCSvKH75WOoiAfSa60Iq8Fe2E7t3CYw0hWCIt6f/1mr uOVakyjtkTVUD66lzRQ0GOpZ6RmMYhgNgMImnCmjkiZibMm0u17y/GTfBVPI9417 PbynzSTxwlh7v8qrsRCtd2JjKEol9K1/PVU+9ZVEAobDhveN1kRvaP8raWaB/m8N s2SioNsJIaRUiHhG1tUl1E0TUX1cbj2QAa8evxw= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAufwGdyIQ3o9NAZZHYKGg Iq7tHhS3x0AY1TiPeNm0kQzDEvRs5z+9DrdEnlaQkOFscEdB+gFUbPe3LEQzNBxy 50W1ItJaekLrIHvF6LnHCgRrKsoqmLo7b9Jtw3SLy+N6YHHtRGOxRa0mPBo98sgc yme4bRrHlwGOkuB2WVOivOhMN9qwJnmLrsU6GSpKkCaj0XASnhdstKDZOyyQWraM KvwIiH+jjUMVCMh20Y5BurIAZ6Botjvl38AIeeC3WfI8xdbzX967MTKklzo1PtCT EV8JggvyCoO8U2baDJwLoUUY7mKHof05Zj36H+gnraxVpFg3i4C0jfmLmTJ8HiWy z9x8cgFqGhroZhdiuHffJCu4NZjGiAOEonQ/zT0T7bk18q907hVo4+8zDYazx5+I jqb7atUgoaYLa84H+OBb+Ds8z4oJupc7wzJFTIIzwJagTiTG8mHWg8X5LIkqJW9Y 5wajlCGPCbvBnn0Amyqu64PAwLZ+PmPFr0xnD2mLI2f6EjQK21RDOiGJrEzmALkQ fMm8K/QU0A7+GJOFP+GRMqfHynteMehyiXFuehyi/WhoX37LVoC9VmQk7A3/hfzO fIhiut+Ja63uxFi3ltfVL/VleJQ1CNzACddmjzC17kMh45wDgNYvwLb40g8QjdJ1 gQ9u4Wd6j2lS5NBw2/Ofz90CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 275341220045015859907132889665431319044773 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-27 20:01:15 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-25 20:01:15 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'blug.net' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 758750454684831071907285403415166508163965935947221745573027099511665458737209188125833405098087520282635979097416707396639152012986399563918072817486117867971184888494418888864653231026331012645721845723154729289223351619753817715739432947895944500312894055407236376441513266787744833567435177474672870086302028294736929168021050275382726587677342116323216648631170360981108601868651871414054673986686489614025494672779565710553575605972069147623153154497472612633827997540986908436336479226790931796193421268163310719725366744600960906609774724958054764590963310020999249834422825723451926898199378506636597916738024281548828016392140888674795422666951565893979240923253050581019479532739970585519004966319752022744157042843442892018581153673990087747256347781882281826371775907934904188838173005843297823456554994215267577002439376165222981634886836729866889295104717817645998790815975833751629087534469252814157905124853924474544271179312177989120244850024088070572016894752896869486466067341148159333759577427944280939329264413644016043326088882300485869963069874176564839412218446260149238815082728011426828493463588412517335690338028506143014286829837051884989627811137850176513410528936349507992519598648238279000063574265821 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 837d11aedd66e95caf92fbb079e9e68abe4a09ff . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blug.net' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016c353cd8b00000040300473045022041ca0f11fb7112816f3d02642c39d8442d4210ab0ec2de40a7cb5c980a5eeeb9022100dd0cf5f0f4f8df1dfd83a0274668b5bdaa3c8825ed3410119e52b9f9ff5b7026007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016c353cd89e0000040300483046022100feceff1cc2d3510a145e9565f4dae643da554909da6798fc83acc5206a78617f022100fcc001514f203a43ee57b4883dd94cea2826ee7db01f6b9852f08a9e5f16e556 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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