forum.lifebit.ai

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:d2:31:b7:11:45:77:c4:ff:c6:35:a9:5b:1e:a1:33:94:41 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=forum.lifebit.ai

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d2:31:b7:11:45:77:c4:ff:c6:35:a9:5b:1e:a1:33:94:41
Serial Number (int): 332862237561101163367460469906901797409857
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: cb:e0:2a:a7:56:c1:f1:1a:62:59:23:43:ee:96:c3:08:81:83:cb:c0
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 77:2d:47:f9:e9:1f:03:e5:ea:19:5c:b1:6d:35:a4:c2:d8:17:85:33
Fingerprint (sha256): 17:0c:91:da:50:fc:02:79:72:48:5d:f8:6e:85:fc:c9:56:fc:b0:a1:2f:43:ba:59:02:ee:61:9e:42:ee:cf:12

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate forum.lifebit.ai

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for forum.lifebit.ai

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

forum.lifebit.ai

Other certificates including the domain name lifebit.ai

(limited to 100 certificates)
forum.lifebit.ai
test-endy.saasquatch.app
*.sdlc-test.lifebit.ai
opendata.lifebit.ai
www.onpageideas.com
opendata.lifebit.ai
zabacus.org
www.excellfeeders.com
forum.lifebit.ai
elmoradillo.com.ar
opendata.lifebit.ai
tls.automattic.com
lifebit.ai
opendata.lifebit.ai
forum.lifebit.ai
tecto.app
derneuenovak.at
opendata.lifebit.ai
www.arches.app
ssrdigitaldisplays.com
travelgallery.in
www.lifebit.ai
test-endy.saasquatch.app
edubarbieri.com.br
www.upform.io
www.synsho.com
lifebit.ai
tls.automattic.com
alisdairmacleod.com
opendata.lifebit.ai
blog.lifebit.ai
sspuat.console.aigens.com
dylankamauoha.com
deploit.lifebit.ai
lifebit.ai
*.lifebit.ai
www.cedros.pe
forum.lifebit.ai
*.lifebit.ai
lifebit.ai
*.sdlc.lifebit.ai
*.lifebit.ai
*.lifebit.ai
tls.automattic.com
*.lifebit.ai
*.lifebit.ai
deploit.lifebit.ai
forum.lifebit.ai
tshirts.cortlan.co
silconp.com.br
admin.teetra.com
tls.automattic.com
lifebit.ai
www.sysdev.co.za
opendata.lifebit.ai
*.lifebit.ai
cloudos.dev.internal-lifebit.lifebit.ai
www.jackscherlag.com
forum.lifebit.ai
prmibr.com
*.lifebit.ai
adamscourierservices.com
diskover.app
www.chakkumkodefoods.com
tls.automattic.com
lbfrontiers.lifebit.ai
fromthisdayforth.ie
tls.automattic.com
lifebit.ai
lifebit.ai
julioromano.dev
lifebit.ai
admin.levelup-livetransfers.com
www.tweetsweep.app
*.lifebit.ai
floof.rodeo
buraqautomate.pk
test.blog.lifebit.ai
alisdairmacleod.com
*.lifebit.ai
tls.automattic.com
www.djolonga.com
*.lifebit.ai
beanstalk.simplesoft.co.nz
www.lifebit.ai
www.oversight.ai
lifebit.ai
www.dunware.com
lifebit.ai
lifebit.ai
forum.lifebit.ai
www.copiedapp.com
tls.automattic.com
lbfrontiers.lifebit.ai
tls.automattic.com
www.buk.app
*.lifebit.ai
www.lifebit.ai
www.lifebit.ai
selektor.myemmacloud.com

Certificate

The complete raw certificate details for forum.lifebit.ai in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 332862237561101163367460469906901797409857
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-20 23:19:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-18 23:19:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'forum.lifebit.ai'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 777944816312313871990325484229549621130355578720076403025934071927558673225190287042868862156961168546825361748544147273096014801462211618052155651534938758567788278909583310013897227626914555197892767158971098297237627653881746778012703002051015995036482571831106934829393290111871446584866753696124344933866418328554644792520461923075240743306332690826783694425994649675074385897151571001130346196950692871578456605766254837089962757055935191942685183074174008947716130643466522576982025727093701597331558121198363626269748227065686469685403374793499457230827960854498984786366268759617383675561218880760631700906251133967500649994621468503331403698894614073960684426480213194042408304087751973290882293233844069955260300816872056626615102239030103547086942418768314146777048797681251543954449919126099056874661375434960426420088267434324344456383205338912725822853975984776055939784565746100364857471177816891029248239026674364722833330169073832247200902792686722941312906648931107375807451847353433819882622809964641286415278176614477118616224066742424649526917986844849210133445958934149454067153231630233795215666891474251457371044067801599783129638661732244777984410676718420599841156305797410367933407292259274314807535267131
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cbe02aa756c1f11a62592343ee96c3088183cbc0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forum.lifebit.ai'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe000001699d9db98000000403004630440220206dfb5f202e04d5065f30b1c60ab9bcd129d0b314f252c0dbfb64f00694d62e022069bdea4e2c1a2e7362469330b213b83340a2121e350f4e8364b02a691512bf04007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001699d9db78e0000040300473045022100b8a3ad5681d3f2587e46b3d557dddd4be466eaacd800a88003a5c2bda69fa1d202203ed71f6a413d1482eb1eef39374c4112b394edcaf145dc409a8490f71834326b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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