ithrifty.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:d6:76:99:d9:44:1a:3c:75:3c:78:e0:ee:9b:e4:f6:15:32 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ithrifty.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d6:76:99:d9:44:1a:3c:75:3c:78:e0:ee:9b:e4:f6:15:32
Serial Number (int): 334314932047962065765483061063703405663538
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: a6:4c:d2:e0:e1:36:6d:06:34:2b:08:b4:3a:c8:11:00:be:b7:7d:c4
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 19:82:8a:a0:68:d5:38:b0:22:a0:ed:f7:c7:ef:f8:1a:db:ef:2b:18
Fingerprint (sha256): 19:ac:9a:e5:e9:e6:82:88:03:2c:9b:ad:67:23:65:47:c6:ad:f6:be:29:1d:47:17:a0:f1:70:1c:16:8e:2e:bf

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate ithrifty.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ithrifty.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ithrifty.com

Other certificates including the domain name ithrifty.com

(limited to 100 certificates)
songavazzo.com
ithrifty.com
ithrifty.com
www.ithrifty.com
comiso.org
www.comingupnext.com
www.brainwit.com
regentx.com
brownridingboots.com
ithrifty.com
www.ithrifty.com
stemcellskansascity.com
www.ithrifty.com
www.fire-sprinklers.com
www.ithrifty.com
pilaw.net

Certificate

The complete raw certificate details for ithrifty.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 334314932047962065765483061063703405663538
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-18 14:10:29 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-18 14:10:29 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ithrifty.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 831574275576869748242279808267241640147788825663483736352058940390426118574778426356853899633400485595635792989754522917213491393919646271735574060031083000014212291001513487196175176518715407039170562441803678286402876698641328510276387906808396082906282505118378303244271837055971672956161194043733372980195897233570037104856142766930812210929118231280421126280650958298556309114309946578803356415697651650918407621104886787051531828771205457482456854036208153609249825417278883247333037716982111976568633496658854934254368924449383569072463623582103888291497912330424292839653092117848543794603643794817975619571342906625545701418996082063971189202543108024372124543645967920928309442518743142543159241242109502157504535397875348257259716389056213962035831488284536861790625816219048455507655084187960350770282084296260762311025640778119806924333667404973900947615833225625557114921515280742708854205076968185682253632819946354536360589004321681439544793236536461357842988955860868360995384064541744212974385634700247208297833474308689295514092498809183222101183577273149304007989437245037118412931873557046399514584358830500633470862469818338367696485397716145749651666144649137191251097311456248828618851813327363131132671771877
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a64cd2e0e1366d06342b08b43ac81100beb77dc4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ithrifty.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000017058d9be26000004030046304402202da107a9d863cdb3b81237e20c28498e283b76e4841dde4ac1f76e8043a14f8102203cdd092a35c6280f783ce917ea84ebfb3f8dd0f58cd0bcbb01b7374c6e8ce47c007600e712f2b0377e1a62fb8ec90c6184f1ea7b37cb561d11265bf3e0f34bf241546e0000017058d9be30000004030047304502205094998e88c942e7d0db276b4d879b83bd084fe59571168dae6a9addee93299b022100c3ec79da5c9533b85bb898c110f8be3858989a400d38ee35a21a8dacf1591ae2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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