fictions.net
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:e1:0d:45:c1:d9:e3:24:e6:d8:ae:39:c6:a1:c1:ca:8e:33 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=fictions.net
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:e1:0d:45:c1:d9:e3:24:e6:d8:ae:39:c6:a1:c1:ca:8e:33Serial Number (int): 337918032516688199507653149876419522367027
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 94:b6:c5:20:43:5c:ab:be:8c:28:75:3a:14:42:d7:1a:b4:50:ba:9f
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): d3:ed:a4:35:2f:5f:42:45:68:77:04:f0:09:25:10:09:b4:f1:0d:74
Fingerprint (sha256): 14:6c:f6:e7:4a:8f:92:f3:2d:dc:35:79:fc:55:91:d1:2e:7f:75:b5:c4:4f:70:e5:48:c9:7a:7e:71:bc:97:65
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate fictions.net
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for fictions.net
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
fictions.net
Other certificates including the domain name fictions.net
(limited to 100 certificates)
Certificate
The complete raw certificate details for fictions.net in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGUTCCBTmgAwIBAgISA+ENRcHZ4yTm2K45xqHByo4zMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA1MjgxMTE0NDBaFw0x OTA4MjYxMTE0NDBaMBcxFTATBgNVBAMTDGZpY3Rpb25zLm5ldDCCAiIwDQYJKoZI hvcNAQEBBQADggIPADCCAgoCggIBAKwYeUHVkeQf/S7ml+X6pWrlseHahX7ME48+ PK/lECBG/vudU5cGm0vReFXQeXAcOHd+qgCfE2uf9Hye4KvLG4z1oTM3T8LfN3Nn UYruhqv6raqOelMAr03B+oViLV1E7ffbsMPfsP85zBP9VuiWks0XIljwmrOcdWKC kdGpf1W+JxK8eHnDtgOONSHgqsAaLtJhe1KTrfgjG2ARaavNZQZGYGM+ILy1Bx7T FNylW3SosLZ0MNF8lAYpt1ePWX/TFFn/amDChHcw6zwRUU/WnI4s4SkFIH1fWHCq PtakhqQLUNrGi/reue7agh75naXNNpnp/LLqTJMPhQHepgKKeQ0GCqreb8DgRGRl do/6GS3IgNYF39hhNVvdlQe7tqILpEWgPe7jnw6GNRdhdMMiEK+8sA52jLn4mWLP O2SaDtbb2v+tv6kY3d8HLCIJkrKOzVAie3kTRfGGhwvWhWiUfHkgETZu3YTBhBZ/ WeuSsUFxtAfizGbYRAQ++01smk/GmnQFr7euxGu03LPEHPPc9cgeUFL+KAYEEARD mIjIhvn5lDUP5sMonx/ApEHvCwOuzBrSY57bqzTogwN+gtu8ipzqgGCTEULBTPY2 Rg0C1BevliRaT7kSt/sO6aTDFsPkVNUcDRNgszhUtbkOvmLSsqRzEYXswUn7QkMB k6tAQ0XjAgMBAAGjggJiMIICXjAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYI KwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFJS2xSBD XKu+jCh1OhRC1xq0ULqfMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyh MG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgz LmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgz LmxldHNlbmNyeXB0Lm9yZy8wFwYDVR0RBBAwDoIMZmljdGlvbnMubmV0MEwGA1Ud IARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0 dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBQYKKwYBBAHWeQIEAgSB9gSB8wDx AHcAb1N2rDHwMRnYmQCkURX/dxUcEdkCwQApBo2yCJo32RMAAAFq/l0vyAAABAMA SDBGAiEAk9FGJ/AidM+Rym/a684Qoh0gs79j2wT/09UhkniGKAwCIQC/ucyhn91m NpyRzEKqhf0Chlw/5fR4tA+wiZGlNehJpAB2ACk8UZZUyDlluqpQ/FgH1Ldvv1h6 KXLcpMMM9OVFR/R4AAABav5dLwQAAAQDAEcwRQIgNH2KvVb/ug4pLY+5RNSTgmHl 5ArPNBuuze7do35stK0CIQC6ngLd0U3wDr5izSp/Od5nz3vjoBSdOnbjY3VFQERd 1DANBgkqhkiG9w0BAQsFAAOCAQEAVA1K7qeL5W5teJfQH0g/yqC+yZiBPqiElhim c+2EK0YmwpnxgVZyy0XDVw5RRYboNQSPh/A3S58O9bMM/ZqhldShhDxWNvAVeoVU 079XP/Oplg8CcR3AzoZI5gdmEXVEb9nDrqlphrNBnsZYq4+HLVSkEJjy3OTz01Pv cGjin4NRx5wqHb3ZF0Q2D0YmG5ayEVHbLn65n0oo0yofC6XUkzokX6n0gUQYatIp xs7XZaRJ8yPuoaAKL35WyGRALGgAzWFrpMujoeGqn1/62MUKNND1KGq/VXhO76Oz GAQGo6uny2fYDskrA3ACaF5beLqhnZN/SxwxKyl7Z+1tk3nnbA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEArBh5QdWR5B/9LuaX5fql auWx4dqFfswTjz48r+UQIEb++51TlwabS9F4VdB5cBw4d36qAJ8Ta5/0fJ7gq8sb jPWhMzdPwt83c2dRiu6Gq/qtqo56UwCvTcH6hWItXUTt99uww9+w/znME/1W6JaS zRciWPCas5x1YoKR0al/Vb4nErx4ecO2A441IeCqwBou0mF7UpOt+CMbYBFpq81l BkZgYz4gvLUHHtMU3KVbdKiwtnQw0XyUBim3V49Zf9MUWf9qYMKEdzDrPBFRT9ac jizhKQUgfV9YcKo+1qSGpAtQ2saL+t657tqCHvmdpc02men8supMkw+FAd6mAop5 DQYKqt5vwOBEZGV2j/oZLciA1gXf2GE1W92VB7u2ogukRaA97uOfDoY1F2F0wyIQ r7ywDnaMufiZYs87ZJoO1tva/62/qRjd3wcsIgmSso7NUCJ7eRNF8YaHC9aFaJR8 eSARNm7dhMGEFn9Z65KxQXG0B+LMZthEBD77TWyaT8aadAWvt67Ea7Tcs8Qc89z1 yB5QUv4oBgQQBEOYiMiG+fmUNQ/mwyifH8CkQe8LA67MGtJjnturNOiDA36C27yK nOqAYJMRQsFM9jZGDQLUF6+WJFpPuRK3+w7ppMMWw+RU1RwNE2CzOFS1uQ6+YtKy pHMRhezBSftCQwGTq0BDReMCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 337918032516688199507653149876419522367027 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-28 11:14:40 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-26 11:14:40 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fictions.net' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 702088794641296705020511496898567997658459945101808783133640763855688142839331423324934060873979453360544631716697520169564375079629009842195609282281232490761779748255726327060801012376485493410148192978939614739290436776246042851632864128396590437080185856145492551140922654868004529610561680933776555859102986551332022825181028344843162732329268552365557695693612522621824682810311700076325340152737687045936181058336735010472554921275088813271359338677676063322797012725987083219715653925203962375058886963379920653223989136294394348250379635755149345114490311285141787966639179521544925894986979906329144703283783248523359279912067677755991720381436662312698533529271616982615699344466131513798013881987885285729189643668013627473728305781009228813856521926010495922567687688928787076623244377653730444861573032427057898317850714875726413585858179152796060700422202383368177241290178160898358966984389135766280143412601257304612429938613147631440750289474140703409859767003526514454684251138356761224771880079925927552184265022837739607243260446531379980142567814726001996622325237074531410745181018772571035790026829360599872753162906436265854031546763097627229606938018090882405436021049903181858045348508409993086765889701347 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 94b6c520435cabbe8c28753a1442d71ab450ba9f . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fictions.net' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f10077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016afe5d2fc8000004030048304602210093d14627f02274cf91ca6fdaebce10a21d20b3bf63db04ffd3d521927886280c022100bfb9cca19fdd66369c91cc42aa85fd02865c3fe5f478b40fb08991a535e849a4007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016afe5d2f0400000403004730450220347d8abd56ffba0e292d8fb944d4938261e5e40acf341baecdeedda37e6cb4ad022100ba9e02ddd14df00ebe62cd2a7f39de67cf7be3a0149d3a76e363754540445dd4 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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