panel.blindstream.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:68:5f:43:fc:a4:91:bd:e7:20:5b:0c:6c:81:b2:12:18:9e was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=panel.blindstream.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:68:5f:43:fc:a4:91:bd:e7:20:5b:0c:6c:81:b2:12:18:9e
Serial Number (int): 296852853622753172658867445385718431619230
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 0a:eb:11:8f:1e:9f:e0:e4:63:21:60:c9:2d:90:f0:10:89:dc:22:c5
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 4e:f1:0f:50:f3:30:e6:cd:e0:f9:31:31:70:ab:aa:9b:6e:90:b2:f9
Fingerprint (sha256): 10:60:25:a6:d2:34:91:61:57:4d:91:41:42:93:6e:2b:40:8c:d3:28:11:b6:71:58:af:f0:61:57:2b:ec:10:82

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate panel.blindstream.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for panel.blindstream.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

panel.blindstream.com

Other certificates including the domain name blindstream.com

(limited to 100 certificates)
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
blindstream.com
sni115479.cloudflaressl.com
firebaseapp.com
sni115479.cloudflaressl.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
sni115479.cloudflaressl.com
sni115479.cloudflaressl.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
sni115479.cloudflaressl.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
sv1.blindstream.com
sni115479.cloudflaressl.com
firebaseapp.com
sni115479.cloudflaressl.com
sni115479.cloudflaressl.com
firebaseapp.com
blindstream.com
firebaseapp.com
sni115479.cloudflaressl.com
firebaseapp.com
sni115479.cloudflaressl.com
firebaseapp.com
blindstream.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
blindstream.com
firebaseapp.com
firebaseapp.com
sni115479.cloudflaressl.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
sni115479.cloudflaressl.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
apron.cloud
blindstream.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
www.blindstream.com
sni115479.cloudflaressl.com
firebaseapp.com
firebaseapp.com
panel.blindstream.com
sni115479.cloudflaressl.com
firebaseapp.com
sni115479.cloudflaressl.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
sni115479.cloudflaressl.com
firebaseapp.com
lab001.blindstream.com
firebaseapp.com
firebaseapp.com
sni115479.cloudflaressl.com
firebaseapp.com
sni115479.cloudflaressl.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
sni115479.cloudflaressl.com
firebaseapp.com
firebaseapp.com

Certificate

The complete raw certificate details for panel.blindstream.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKA3/5XWvV5BXIlxZEYA
k2c3vsN+INlC9Tgsvdn+xsmvROO5B2zRwgaEXJL4sFVRt13N7pwZqGgoYW0GaucS
pdzAAUk7W/E7RsFNPKPqYbhyNMtvhruo7ay/I2kfoE2TTk585C0RHwZI9exiuev1
HLv1zQhJ1DZW8kDS4DgsYb/3SnRnzpotkkyCtyaGza6jPb68XKD8VxYwkeaZRbn5
MJpvkz6sZw3KWH1/psME9TsXVKn5b39Ie/wxG9FH0zh7z/38/5bW2Lbpc8jsbXXo
qu5SyFaJyxYXpqtkHQ+Nel5GVCaceGtfhzTLvQGr6TULn7KsyaI+cEhg4P2VkvI9
QwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 296852853622753172658867445385718431619230
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-25 13:04:24 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-23 13:04:24 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'panel.blindstream.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23811808140747859690772446659770440798410252379523771627185707411321105538923102306864634019065378082886462447748701070281850564976113170314727305310584459788606729907960312603884524373922933102239691581438096160140736208186144574779673447811624086911330869596575186310199540913127320461928114840695211088980693255222966130841914211107926283922477023536970292692707888595995663329784695674631601925790749618213016391402116183454507931149517134845043011222932065934805536022226682695093073398313423761122328948097667812490098862347558484146545530507995076693727905174810168400586691826392917336385698418422409925377347
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0aeb118f1e9fe0e4632160c92d90f01089dc22c5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'panel.blindstream.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016cc9179ea100000403004630440220437f3dc80d25208fc5c09e3313b1cbd192c92c92fbb0a6787fcbffffdc47fb6b02203e537b98e46ffa836b18ea6aaa46e07f8fc9fb20eaa7723bd986cd59b7178d1a007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016cc9179ebd00000403004630440220022cdf2c3ff0ac4cc8aaad513670d4b8e84d2b4029db0cdbd0c812547e46375302200570664559a2dc0eb220ac26df26c64cb4c336f30fc599ff1016182a76989078
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		001d72a351deea3da3e742af0ea9ec6761ceb2c2e3e6c35f6e84fde9d22c783294bb910749e9546ee40144f1503c453dfcdf8a5bc94065be5ec11c863605f5becd23221c1f57900b1dee77fbbeeeb0e756aefad3aad63a018360b590e5ec4d72a89260b3ba0e014adc76b514f31d2d0ddd48f72a1d8cdbbde4a244fc635d345ad3dad7486485a35a07084d444ebbcda430f4f612ec759186e1c464eb66e3234770ef814ca29f3449b5ad985fa4e70f0e9e23a6206a1eafedf10b055a558b67228d8ad7f19ecd3b3f168295e69dbccde9b0c192d9959c19d2bcacd802834f9cdb0a5fab5cf0614dc9057f1e1978b1d2e706ea83822a88d75e1ff51223f9ffe74329