blog.boundarywaterscatalog.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:bd:77:c3:25:e4:ea:9e:e7:c2:1b:55:da:5c:f5:26:12:5a was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=blog.boundarywaterscatalog.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:bd:77:c3:25:e4:ea:9e:e7:c2:1b:55:da:5c:f5:26:12:5a
Serial Number (int): 325809416541309716800101679927719784485466
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 34:4f:1b:29:41:19:2b:6c:33:d9:43:b3:94:4d:bf:2d:ed:12:1a:77
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): b9:6d:18:80:99:0c:30:85:a7:c3:20:ff:06:fa:29:fb:46:00:30:d7
Fingerprint (sha256): 14:3b:7e:a0:88:e2:d0:81:f7:20:88:32:db:cb:f0:37:0b:b7:fb:d5:ec:78:06:36:57:68:cb:0f:03:3f:60:06

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate blog.boundarywaterscatalog.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for blog.boundarywaterscatalog.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

blog.boundarywaterscatalog.com

Other certificates including the domain name boundarywaterscatalog.com

(limited to 100 certificates)
tls.automattic.com
blog.boundarywaterscatalog.com
blog.boundarywaterscatalog.com
tls.automattic.com
tls.automattic.com
www.boundarywaterscatalog.com
tls.automattic.com
www.boundarywaterscatalog.com
blog.boundarywaterscatalog.com
blog.boundarywaterscatalog.com
tls.automattic.com
www.boundarywaterscatalog.com
blog.boundarywaterscatalog.com
www.boundarywaterscatalog.com
tls.automattic.com
tls.automattic.com
blog.boundarywaterscatalog.com
blog.boundarywaterscatalog.com
tls.automattic.com
www.boundarywaterscatalog.com
tls.automattic.com
tls.automattic.com
blog.boundarywaterscatalog.com
tls.automattic.com
www.boundarywaterscatalog.com
www.boundarywaterscatalog.com
blog.boundarywaterscatalog.com
www.boundarywaterscatalog.com

Certificate

The complete raw certificate details for blog.boundarywaterscatalog.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5H3yRwLFsuFAfJCpAgQ/
EISk7RJgBTvgr2iD6RcQtYE9ZRmbgZYXlGjjsi9rQDB7rWDR8u+Y7MjydFwAU7h4
HQvthnCg/ZpmDuQkTCpUvrNWwIpKMPE/9uZoqq1bBn+w5n7qSj1Cwx3V8u/pRhpT
mhl5v1BgnbnhK7g2iHSPRxZVhp/z2h35BSH5LedCtj/yqz6RcZ4jkw5XQnLscfxk
Hj1EqH6vHGsGlBOtH7FBdGMSO0G6O2lUQcCvfnwRfLkLrkK6kcN0DETFC+9r7ToR
H6J96Hmi8NvMM+MxJ7mNXPKx5e8tKBMfTTkxIgBI7itAq5u3muDV9wtj89nWJ/Sv
fwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 325809416541309716800101679927719784485466
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-20 13:58:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-19 13:58:28 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'blog.boundarywaterscatalog.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28844440014888633405342790445381062009460928318800567410398824280247304895158771718564038212812490245139548089956627387927794093155253138899804252915318815438074135064074165877900117097348389561770501011671380950373343266180082910920573072338631855802384950236510860727604774982121846318124436443230820410282236761012832541668016370468394577824276113635691451830448669154148385215265815928226286889099421007897059809962454760959973177640939821271153113682544649285375155027109024500802608892461390362542000795219975663894743860767528282944558267055372836922744043915862066217892297067685140015661735945639279793057663
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							344f1b2941192b6c33d943b3944dbf2ded121a77
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.boundarywaterscatalog.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf6400000165f77d4cd20000040300473045022013b6b431b206c2fec7f4af74e5ae9b3afe5402dc94d3a8c246eed7ffd691a5dd022100e2d880fd65f0b04ce2bd94583a8f647899ad38f62dd9fddfb53c89a44137a60a007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000165f77d4e7000000403004730450221009adebf3706504f81766f77ce48c3dc312f66316f41766e53262fdc9a4b16fcb6022071a1321d43c22bda5ee0cc5d0aca7007d6fc996c4f16ae12fad3a09d7866bd04
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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