chrisingram.guru

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:29:a5:f0:c8:10:80:c8:6f:dc:17:3c:eb:7d:aa:57:ea:f3 was issued on by Let's Encrypt.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=chrisingram.guru

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:29:a5:f0:c8:10:80:c8:6f:dc:17:3c:eb:7d:aa:57:ea:f3
Serial Number (int): 275509007667379204144756039948777582750451
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 8f:4a:c3:86:1b:0a:d5:f0:fd:96:65:12:18:4d:73:cd:84:cd:c6:e7
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 0b:0e:5e:ff:9c:b2:41:d9:16:cc:da:fa:cc:f6:dc:66:fa:fa:5b:2c
Fingerprint (sha256): 18:ef:e7:ae:24:64:76:03:06:08:8f:f5:04:e4:86:47:41:98:71:c0:ee:26:bf:4b:76:7c:3f:a4:f1:92:ab:ba

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate chrisingram.guru

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for chrisingram.guru

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

chrisingram-guru.okdata.com
chrisingram.guru
mail.chrisingram.guru
www.chrisingram-guru.okdata.com
www.chrisingram.guru

Other certificates including the domain name chrisingram.guru

(limited to 100 certificates)
chrisingram.guru
mhprice.com
mccysorg.okdata.com
mersonoffice.okdata.com
terranco.com
terranco.com
chrisingram.guru
chrisingram.guru
sruinc.org
quantum.church
mhprice.com

Certificate

The complete raw certificate details for chrisingram.guru in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFxDCCBKygAwIBAgISAyml8MgQgMhv3Bc8632qV+rzMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA1MTMwOTIwMzdaFw0x
OTA4MTEwOTIwMzdaMBsxGTAXBgNVBAMTEGNocmlzaW5ncmFtLmd1cnUwggEiMA0G
CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL/kSU2xmt6TZpHA6U9WIXkjmSBXLZ
QVm9DkWOiA08OyRnGHRXfJYh75z5rUQIGdCAuPsXRcBajz2dhE0f/QvkwhfF05lC
j9XPT9SisT42pUtC1p1gLmtdU6+KWNq3X4NgP+IhfWinSGxq2i97u+o2/1lBG+YY
yClZTBvjH1mwtdJ9b0sEIWrnO1c6yxRRTAIJMJDMX3rkItie4IwKRST+fpsz2MfP
aMW4m6oyhRf93iV5sCSyijIk6DpKS/atk7V4oltqzCIx0/Sm67R6UIVtnqjHPT8b
qEPU6PwMZ9o3YMxqZaLKdYvMA/X/U8KyZ5fjw0H91Hodik8CPZ9gipfhAgMBAAGj
ggLRMIICzTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsG
AQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFI9Kw4YbCtXw/ZZlEhhNc82E
zcbnMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsGAQUFBwEB
BGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNlbmNyeXB0
Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNyeXB0
Lm9yZy8wgYYGA1UdEQR/MH2CG2NocmlzaW5ncmFtLWd1cnUub2tkYXRhLmNvbYIQ
Y2hyaXNpbmdyYW0uZ3VydYIVbWFpbC5jaHJpc2luZ3JhbS5ndXJ1gh93d3cuY2hy
aXNpbmdyYW0tZ3VydS5va2RhdGEuY29tghR3d3cuY2hyaXNpbmdyYW0uZ3VydTBM
BgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIB
FhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQQGCisGAQQB1nkCBAIEgfUE
gfIA8AB1AOJpS64m6OlACeiGG7Y7g9Q+5/50iPukjyiTAZ3d8dv+AAABarC1XtwA
AAQDAEYwRAIgW0XbhzDQc4CYv2Tkmt80TJL85DtiUj8SkUsmtOegKRwCIB2ZAEd5
sthe6ab+7zTNtFebP2mDRENuIe9Io3CanbCUAHcAY/Lbzeg7zCzPC3KEJ1drM6SN
YXePvXWmOLHHaFRL2I0AAAFqsLVe/QAABAMASDBGAiEAykCZJqr2gPmKek2J/QNE
cHmlNfm0B00iMKD4r4FNxNUCIQCZLbY/7d0zC2aMm4LZ1y2Dna0bmqjqc1MrHpcq
865tAjANBgkqhkiG9w0BAQsFAAOCAQEAU9iiuCrg5spbak8rU4dbrnrORDWe0+rY
W8Iths5KVapT1rEQOlq82dqT9Yg84ezkYdBXyZk+3ZuRydrmTZEbXs+3OiuM6oA4
HRJQT5eat6KTUFfHj5Lq+IbTqOXKYB4Qj77wlF5QWWBFVqXzI/ffDtdnWTpOIy1k
ZGlEkWLkPL6aF1WM2GAgupsszJfjYAb8fUWMp47Yv2RwMx9U5C1XFUHA4MTZaouT
/22bYPUVm+8jsBK1tgzNXm141+UMNSmB3YUw/JDbFj0iecAuCBkT7vbawrAFX29m
FVIrmXYCuGtef8Q4tY241YYAYnH2FrC4riDHhGU4blvJM/8dL2LVKw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy/5ElNsZrek2aRwOlPVi
F5I5kgVy2UFZvQ5FjogNPDskZxh0V3yWIe+c+a1ECBnQgLj7F0XAWo89nYRNH/0L
5MIXxdOZQo/Vz0/UorE+NqVLQtadYC5rXVOviljat1+DYD/iIX1op0hsatove7vq
Nv9ZQRvmGMgpWUwb4x9ZsLXSfW9LBCFq5ztXOssUUUwCCTCQzF965CLYnuCMCkUk
/n6bM9jHz2jFuJuqMoUX/d4lebAksooyJOg6Skv2rZO1eKJbaswiMdP0puu0elCF
bZ6oxz0/G6hD1Oj8DGfaN2DMamWiynWLzAP1/1PCsmeX48NB/dR6HYpPAj2fYIqX
4QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 275509007667379204144756039948777582750451
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-13 09:20:37 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-11 09:20:37 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'chrisingram.guru'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25751760080937221652047839939121046407043325433691195325900809148861361506136570837466689537792668312130141053538742208838890966151885083738994869377699587721075433351609703205164998013875721070031154930128956168109377685801026592361947135288754210747304946623813339298539650601116861214311384565246887268298727820501347740348609121042672607942163855692604789420964393453437928247331760570399177208412954956869831932300475672005356377130528974560841729715822438540487697312901769525708694556614521683596610653357319446996861336895158793473396396617236973607906240256404117597946549870815948831885086963383584336549857
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8f4ac3861b0ad5f0fd966512184d73cd84cdc6e7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (127 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chrisingram-guru.okdata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chrisingram.guru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.chrisingram.guru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chrisingram-guru.okdata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chrisingram.guru'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016ab0b55edc000004030046304402205b45db8730d0738098bf64e49adf344c92fce43b62523f12914b26b4e7a0291c02201d99004779b2d85ee9a6feef34cdb4579b3f698344436e21ef48a3709a9db09400770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016ab0b55efd0000040300483046022100ca409926aaf680f98a7a4d89fd03447079a535f9b4074d2230a0f8af814dc4d5022100992db63feddd330b668c9b82d9d72d839dad1b9aa8ea73532b1e972af3ae6d02
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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