www.notvalid.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:20:0d:ed:62:43:c0:c5:90:2b:ce:f1:0e:fe:64:a0:e9:e0 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.notvalid.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:20:0d:ed:62:43:c0:c5:90:2b:ce:f1:0e:fe:64:a0:e9:e0
Serial Number (int): 272244406068095535438615866910294279252448
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 70:60:5f:04:dd:b6:fe:01:40:ff:b9:f4:5b:18:7f:b7:c2:df:0b:e7
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 38:6e:f0:2d:f3:26:41:6f:33:26:07:a3:7b:4d:91:91:08:2d:6d:3e
Fingerprint (sha256): 20:c0:fe:85:c9:3e:d0:3b:d9:60:5b:60:5c:96:15:25:55:cc:4a:41:32:ec:c5:03:85:fe:ab:8d:b4:d4:07:25

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.notvalid.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.notvalid.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.notvalid.com

Other certificates including the domain name notvalid.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.notvalid.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 272244406068095535438615866910294279252448
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-25 15:45:59 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-23 15:45:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.notvalid.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 864918598843895360648328596057239861947543109424581001489154475780481434959608186026521669603685675067549507809710734146883747650053934580166413740757698288781624012143659092387853294321616842682811778453084068320093418319781801936835215041868190858058113975681894467281605014330557954012028725931045346225487598188099833057440043134773489423301480212437652313512234437309903979834656521765815090345825462694340809705419566879571764106629713150126606708583325403636103872942099532691816297479484565107570567722971266919794421822597193073031583969765462160578026131597590221416020483959871176136269703366119570255142630796219593386883805731383493430550276042029273364602017617113918648074096347753251210014807068703839317916509272917959897069546877820468886109946052794984736569071383523869427917309332359301190618564365242462000145506492609336181617423397289943931125092581544360315638781711903154292886225124461056748313772311367609500428841247177280051139133417121455208333197851150215896528151621267994154934044754029842427303018264303665525881087568615993438007760211082843025862776512574316596806623109134904450554193576735088406729293475733380793827756089265526639486456652031454083639758698238399673821795174463845898722323323
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							70605f04ddb6fe0140ffb9f45b187fb7c2df0be7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.notvalid.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016aefe280080000040300473045022100f89b2bda68f340b2fa92c7682c4cd5d7b9a009bdc31c2fa97cd602c937fc1c25022064aee29679a513adc89ed57052fa8f26e12b620d0e7c8f0b845a9a52c4f8a2c000750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016aefe27f42000004030046304402207aa4dfb27efa9c2cb6ff4b961d9053e070a50c711502873d9730cfb4536149440220499e55a301478bd98c865e50a71ea215adca03316bdc29a320269cebbafc05f6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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