mindmap.me

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:52:5c:78:ba:cf:0a:30:ac:e6:46:1a:3c:a2:3c:66:ff:74 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=mindmap.me

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:52:5c:78:ba:cf:0a:30:ac:e6:46:1a:3c:a2:3c:66:ff:74
Serial Number (int): 289362927722964499998186799522179967287156
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e8:cf:43:46:94:87:2f:8c:c5:5f:5e:a4:ba:19:3c:1f:a5:33:89:f9
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): c8:c2:50:9e:31:9f:f1:f4:df:93:a3:f4:1d:4f:35:aa:13:24:94:d1
Fingerprint (sha256): 11:28:cf:34:3e:38:a0:f8:b2:6c:19:75:73:b6:5a:f5:80:b8:85:59:f4:f6:77:33:d0:e1:a1:18:df:a5:10:74

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate mindmap.me

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mindmap.me

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mindmap.me

Other certificates including the domain name mindmap.me

(limited to 100 certificates)
mindmap.me
mindmap.me
aaron.cc
mindmap.me
luxuryloghome.ca
mindmap.me
luxuryloghome.ca
mindmap.me
luxuryloghome.ca
mindmap.me

Certificate

The complete raw certificate details for mindmap.me in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGTDCCBTSgAwIBAgISA1JceLrPCjCs5kYaPKI8Zv90MA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA3MjYxNzE5NDZaFw0x
OTEwMjQxNzE5NDZaMBUxEzARBgNVBAMTCm1pbmRtYXAubWUwggIiMA0GCSqGSIb3
DQEBAQUAA4ICDwAwggIKAoICAQD0TrxzKkOs6sA3yhJMhQ/hKpgnDQcfz+NkbiDB
pxZwabAPjActfA/eamy9QgZf5ZY22MXWOwKcZQe/2Eo/43AXZ2hu4bp3DWH0BxLh
ggyHXS0UD0wGDh+7bw8UB9I+kz8xWNYkWGz+Tk2pJIizkGpx3EIDVZmqlchaHc5H
Cgfri5JBez7BsAX6l6I3hGFE/MDU5edza9M5q+/kdXiE/S9RDDoQZuir7MoEIUGW
or8KVBfJ5MQSyZ9jW9St9OCjOJBzyAJFPs2DkUi01GUTbipHYQmN50jpnquCwmd+
4Iivgxb2sOb0q8BLncVoOcOYNCagjD5mq0ccWIEpdUpNl5RL/7+cryGmzFlmkPDN
4myT7aGdtnG5yE9e+d73J+wsMTpbdXxkb2GYdre1lTYHd987OJYWVawGwN+RgiE3
k3FGeFMonHuW57cEa7lSGr76lM1X9CaS6k8fSOSQCOMuj3LI0Rcvda8u4U/UJ16W
aA3hZ1K45mzESvDrRPFCFR/myVGYC11U5m85INCsXRqva4zxaV+KbekOY9kvVKXL
AOWzGyQWWgUG3SPDCX2SLISXsjYynacCfwuVswpNOsf9VcYUnHTMti66S8QI1R2V
ja4Er4OVqsFnfvSKkHCoz4s6+Ub64iaQRIC4WEJRONLhWYqQMqNBOpTE4+sghdD2
Ojo2BQIDAQABo4ICXzCCAlswDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsG
AQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBToz0NGlIcv
jMVfXqS6GTwfpTOJ+TAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBv
BggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5s
ZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5s
ZXRzZW5jcnlwdC5vcmcvMBUGA1UdEQQOMAyCCm1pbmRtYXAubWUwTAYDVR0gBEUw
QzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDov
L2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEEBgorBgEEAdZ5AgQCBIH1BIHyAPAAdgDi
aUuuJujpQAnohhu2O4PUPuf+dIj7pI8okwGd3fHb/gAAAWwvgqYPAAAEAwBHMEUC
IQD2qTmr8oTD4z8nqEhuCAW1bPZZgtsCl/rrs4CRLDWvNAIgGhEB97/7Pbk1jQpS
zn7aFCuAA6awu2LqO1RbRabCaLsAdgApPFGWVMg5ZbqqUPxYB9S3b79Yeily3KTD
DPTlRUf0eAAAAWwvgqPqAAAEAwBHMEUCIGfDR3nJ9DJLfvIp2pQFzAsggt5FxYb3
UaUrWPdY8FK3AiEAn4pXO+7/CmAK8PvtMdkCegAMKxn3RAHmAt38VKtQNaowDQYJ
KoZIhvcNAQELBQADggEBAGvIWNyYXeNqZxPucF+neHMMchajQmcJ0A8rs68/c4lY
8NjYjD1Sv/qFBI659tv547ZLFSMrdaE08vmHfopzZo8OPAzfuD/5A6wZoLD5Fw6r
yxe7dltwxMDNMp4pACtQ2oDLu+AJdC0yCWx+SP4ZH5zOdab0ABGqjuxeRTEF/xJG
t8tR6p8N4BvRJ6V40VnZEZmPK4yxkcycfB1xj1014ICq7r60TaDHPws6awNm/hZi
sa70TZrbTpZWwXM8kRlOz9Q4u6pyMr/k/IPrHJ89wlieg8bB4mpkQBnx+XsDp/6a
xYL5MEz9rQMCuhPxBFO48P47aWxuAqMFi1W6IQifsu0=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 289362927722964499998186799522179967287156
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-26 17:19:46 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-24 17:19:46 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mindmap.me'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 996687900233608320289780221178259896897299823152571849416508279778858064360985159640400970924978615732508812950365820831496513109945814933683045923193792471489040833756719573451951393076314985744847815032375933804284337542786036932926365608528152512053250713072422671070561853143157104260755088729824091772378786474877629802215704030500041304766059342861281485662401755977529445345591184802536077029617495696794330755320662485276729198975141702990428283625125327618928999221002500356785893597037860809626051467856367523245027104528388433302979913107328953421025507452686508104708443951653572404738767275279225210099730349079712395385082263814339250789521531165013325368211157474423968712055181377951203389910932459521043231122961273458267251978937357982819128082772772009234561769902328910338426034685925957268671784804773297247922962534353243552250682302311791808201197803249670877417041524141544849885410516830856579363281623262150390092007629955602998831519016847856959276921246976459907487246315048315383811577675262079151908188612328115304994387313245170430497298609922598584433735834063953283474293587910367223963023765537413440352904032611670126712750774310955319250340229170966811380361540537641473179986545721655587499554309
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e8cf434694872f8cc55f5ea4ba193c1fa53389f9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (14 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mindmap.me'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016c2f82a60f0000040300473045022100f6a939abf284c3e33f27a8486e0805b56cf65982db0297faebb380912c35af3402201a1101f7bffb3db9358d0a52ce7eda142b8003a6b0bb62ea3b545b45a6c268bb007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016c2f82a3ea0000040300473045022067c34779c9f4324b7ef229da9405cc0b2082de45c586f751a52b58f758f052b70221009f8a573beeff0a600af0fbed31d9027a000c2b19f74401e602ddfc54ab5035aa
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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