www.biz30.timedoctor.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:a1:04:1d:23:86:59:40:7e:e3:21:39:a5:91:bd:04:4e:75 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.biz30.timedoctor.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:a1:04:1d:23:86:59:40:7e:e3:21:39:a5:91:bd:04:4e:75
Serial Number (int): 403240073010432648418646175415382019690101
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 58:ca:76:65:0e:03:22:91:a0:12:70:bc:45:5e:71:6f:d9:82:c8:93
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 62:5b:64:21:0b:bc:93:fe:0b:b8:43:0f:24:9e:13:32:c2:42:7c:32
Fingerprint (sha256): 1a:fb:53:0b:fd:38:dd:e4:36:2f:18:34:12:9e:25:70:cf:62:3f:5d:9e:a9:b0:e9:1b:1d:e0:3a:12:46:15:77

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.biz30.timedoctor.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.biz30.timedoctor.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.biz30.timedoctor.com

Other certificates including the domain name timedoctor.com

(limited to 100 certificates)
www.biz30.timedoctor.com
*.timedoctor.com
blog.timedoctor.com
*.c.timedoctor.com
*.timedoctor.com
mx01.timedoctor.com
app.yippee.yoga
download.timedoctor.com
2a.timedoctor.com
mainegraniteking.com
craftedarforminecraft.apptget.com
www.betonopoliravimas.lt
changelog.timedoctor.com
www.biz30.timedoctor.com
matomo.timedoctor.com
coffee.kiedrowski.ca
www.biz30.timedoctor.com
changelog.timedoctor.com
device-api-1652.sandbox.timedoctor.com
api2.timedoctor.com
api2.timedoctor.com
*.timedoctor.com
*.timedoctor.com
www.blog.timedoctor.com
2a.timedoctor.com
support2.timedoctor.com
changelog.timedoctor.com
*.timedoctor.com
zecocostudio.com
www.biz30.timedoctor.com
p.quesmatic.com
admin2.timedoctor.com
staging.timedoctor.com
blog.timedoctor.com
mob.truvalyou.com
matomo.timedoctor.com
support2.timedoctor.com
data-integrity.timedoctor.com
obrucheva6.tom.ru
blog.timedoctor.com
matomo.timedoctor.com
*.timedoctor.com
changelog.timedoctor.com
2.timedoctor.com
api-1652.sandbox.timedoctor.com
blog.timedoctor.com
admin.thebrewerybible.com
pyloncity.com
blog.timedoctor.com
www.harrahdentistryandbraces.com
www.biz30.timedoctor.com
*.timedoctor.com
api.staff.com
in.timedoctor.com
gforgov.app
td2-desktop-api.timedoctor.com
changelog.timedoctor.com
changelog.timedoctor.com
api.staff.com
www.alqalaaschool.com
www.biz30.timedoctor.com
blog.timedoctor.com
kenailabs.com
help-ru.timedoctor.com
api.staff.com
app.babybezoek.be
2.timedoctor.com
support2.timedoctor.com
support2.timedoctor.com
www.thecultureofwine.com
go.timedoctor.com
changelog.timedoctor.com
www.yirunway.com
timedoctor.com
apertura.alfyinversiones.com.ar
timedoctor.com
temark.timedoctor.com
temark.timedoctor.com
partners.streamsgate.tv
device-api.staging.timedoctor.com
backoffice.vodium.us
enhancehs.hscargo.lk
www.lammertsma.dev
www.biz30.timedoctor.com
blog.timedoctor.com
blog.timedoctor.com
www.biz30.timedoctor.com
td2-website-helpers.timedoctor.com
post.timedoctor.com
app.minis-wissgoldingen.de
www.biz30.timedoctor.com
status2.timedoctor.com
www.blog.timedoctor.com
www.biz30.timedoctor.com
louieclaes.be
staging.timedoctor.com
www.welcomecardbariloche.com.ar
*.c.timedoctor.com
www.blog.timedoctor.com
agency-react-staging.staffshift.com

Certificate

The complete raw certificate details for www.biz30.timedoctor.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ktfwr41dmntdrtjFaoi
hac3k2+zRAZUFuwcc+4YYzkfjPWwAFoPErhEoSHYUvUx+Pr3Dyoe3MHcVt6fztTv
69G5m0NSbPwMiSzZSxfqmoQjgLzKZrTu7zWLRNGy2lk8RFg26FQZCPwZe7YbIzar
b+gCmiYya8TOOx5SSIE19MrcBIjT+fn6FRrgJV2x5MW7V4LD4TAqEngv55wfG3m8
ORGF6aysjyGhrwb/TBdJOAP7MxjG1Gr1tqk40DEonGmeFd3Rm30JQyNeipcmO1mi
Kr7p5h2zGF4vMSopwU08BYsLAHzlx/cskQSJSOTSQvGCQpZP8ru8aZM9hSvEuiOk
zwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 403240073010432648418646175415382019690101
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-21 11:37:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-19 11:37:05 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.biz30.timedoctor.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27052165599615118057032634023607934820655504198812952038934042192441345804892894160118137202760091150562926706706659446922733240732142246604961891569818934490441578527022847468912455217034218453829396885520107242508253443215828402015396574087635146329623017615297709999052668099505543782710625040200630153145882993149320180513350119805865370204295903271246538040913602867206547405182438016389551775660527961288868040025820155079657659878319003151314685603650248488247651646180578622932771358370502643408206220941256231396022224560228592732573403088307362676302681055670257722479390945676675500811891144470964648256719
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							58ca76650e032291a01270bc455e716fd982c893
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.biz30.timedoctor.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c0000016696a101bb0000040300483046022100cbecaa0bec69946e42aec237eb9fd1cbf6aa694fe573519835a290155df120a4022100c7c771d2c3fb254e975b8ab9ce924e950e4b9b276d32eb97a35688f93832faa3007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016696a103030000040300473045022065d6d817f90a70aa506e89e92836f6b8fb7cd766e7507233ef38c5803c29263f0221008e3287427976ea16bb37282a371ce6da2337b4983ee52ba448c9c08618484e96
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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