storysummit.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:e7:c9:cb:24:19:6a:a1:6f:0e:37:32:d3:94:3f:bc:04:8b was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=storysummit.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:e7:c9:cb:24:19:6a:a1:6f:0e:37:32:d3:94:3f:bc:04:8b
Serial Number (int): 340210314149613026027233165458346375644299
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2d:5f:13:ea:ab:78:80:70:8b:76:87:4c:ad:ea:63:78:de:5f:12:47
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): f7:b3:8a:4f:8d:91:73:98:29:b3:e9:d1:89:6a:85:21:ea:3a:36:a0
Fingerprint (sha256): 1c:05:73:05:08:14:4d:b6:22:42:ac:83:75:af:9b:86:f8:3d:de:97:36:3f:99:4e:69:e1:43:f5:eb:c9:e1:a7

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate storysummit.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for storysummit.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

storysummit.org

Other certificates including the domain name storysummit.org

(limited to 100 certificates)
www.waterchallenge.com
storysummit.org
storysummit.org
www.wouldyoubesokind.com
storysummit.org
storysummit.org
storysummit.org
www.storysummit.org
storysummit.org
www.storysummit.org
medislide.com
storysummit.org
storysummit.org

Certificate

The complete raw certificate details for storysummit.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 340210314149613026027233165458346375644299
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-19 23:17:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-18 23:17:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'storysummit.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 706146414648897522665743854664680334064000878988015468279647586072160647052174602840439520782997698616067544593871350923654495426634289682144407785245323915676513710141101195327982699906946195162727625412628227609087539663238019078586185190675700067865342937319699759023196163433925052043621649574797629005128435472545585540204958769832033548693421227955995715347086860216009645566571444228635327839225347840688731426316126589632510244620613940915338831794948438712235340688229037783760706070510698325324565700238690083865359737028576201392057718641155631764150754546199758391011974232038517656510144957951083033021690820871569997463957159786982685409266977871214871783382936194138596862700428578848587047977160811175925792201815043550910547847892154178996253754900155273334246755275948358265473587606330443337387849244857004831064348339948201098127683366747328818494219754733916588304745544336894761712678785701826046228835809383723392456038341604203794549690472938462437963812370209956919555439034717971530082654963044240583853596675103964749694539538777241167035376442342493576716170321642836723028968153771595177237997068003052561670159700312874847023114859087240450775316321509581798357113044973944417199790130591653813481997619
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2d5f13eaab7880708b76874cadea6378de5f1247
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'storysummit.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016fc04f70de0000040300463044022001be405361658ffd63c4c0efa1c9e0c274a9b5db5cfda6dff281390aa76b58a9022033a393fd90720065cd7dd305884b984a1b9eacfebd7513df1f6d6b34353fabd400760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016fc04f70fe000004030047304502207dc3637ebc8337cb0bdf05879fa280666844617fd120c537b82f1bcf310c3acf022100e490fd2e4b473ad0bce4c6a4c026e25849a4aa409605d3590cdd1a55b96d15ec
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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