www.theheroinepidemic.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:68:47:bc:be:7b:8e:17:7d:8c:cb:c0:6d:8a:3b:7a:cf:01 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.theheroinepidemic.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:68:47:bc:be:7b:8e:17:7d:8c:cb:c0:6d:8a:3b:7a:cf:01
Serial Number (int): 296821579158015337667286404309555953192705
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 9e:d5:0c:61:e4:99:7c:3e:bc:95:21:71:00:44:5e:14:5c:b0:f7:2c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): af:23:3a:6f:4d:0f:17:18:64:f0:d0:95:47:e0:2d:db:62:a5:31:09
Fingerprint (sha256): 21:a7:e3:cc:03:a9:1e:b8:54:77:aa:de:e0:b1:63:1a:6b:d5:e2:d7:3a:ec:f3:76:a3:5a:5d:6d:5c:57:88:14

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.theheroinepidemic.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.theheroinepidemic.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.theheroinepidemic.com

Other certificates including the domain name theheroinepidemic.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.theheroinepidemic.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAtQMsa9XEi/zgozA8ojhd
Wp+QjvT2fzCqJk59P0gtlVC9yZQKfOObDiBvDvXqCfZTNhBPWQkZ/ld4WeYY539G
noYraOQ27Oh7BRYmX30XBmCuZtbhav4VGdLci6QHNZa4rgKvt+8IDBNN59kMuHJp
+jtIegDAwrUyoyxtAbgVfMVkNKb+k0FYXZLMzCgHc+dH7gtt73oY/NYUWnFAdYyG
1fqvj/fEDQJVpmikM6DqPFPS2mBWBCqCNiYXU4Sa19kvbqC01BqMYqifiivdC2Sq
JCqBFsPu+D63kSQ02wQbOb9kip9/G5J05P+aM9Kr+I4y5vK39eg0zRe0jhf8or8j
+CMG0O6DBb7DynJr4wnPoXJ7kTmkNOmY5elmuRyM9Ld1evwbZmtY4HbCuTdVo+bh
qwZanKixf3lj2KdkgT8ZZcEhdNwLxkeA/pNBfgVbF7g0LIEKSHkgRBuOZ+SZDdMG
qO6S4wE/eZs5Z98ZOwa/sRC+PS492WyyeIX0x8+gbt6u9iNWoY60INROdV8y+lfp
LT9KlBjryT6gjZpDm6nQsIBJNvxnq/YIi3N3wCmub8OkaVMzKxVhH7skYJcqXZo4
g+BQ4q0oCDOyAknCDTdtWG/zNp4ZPOs0mcWhEFN0ByWe/KfaWPVRLqdv/b2Xauuz
bsmOEnkEZkEnCI3/aOQpguUCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 296821579158015337667286404309555953192705
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-09 08:39:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-08 08:39:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.theheroinepidemic.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 738466149881194047955109744902086032676267754165595647348240062395421199681226991337476205959513180643817984352999731777763951406985084119887828090835028046407519694864428901094132411624751714316139737357087016995906616562038919795960154845083595492856132667252929333075503974734052244612733784710048047218181571678845331669968165432959793316344530376986435105922602011977920183846206868777053365875452569847182858042486944631733943884982319511311760981285239126426568696893105052226667533882116068988564555975401105417563862966323686579948881833821166809815331746390821466366540631833865999092648352903359313941905498317921688704785063953750375156107020671474343477320125854523721594171315322372420493184781002338391458094541828720883912996328837416848370365537030861957860952246029590601820228317749605719708732031201527371171491977392780720819482946361366126725808028713699624894844493475443767868085994507794328621051939426047156260823392501163497736919600040330134827062848064919344928955343484383831907694365924231518024887061861063490776922726186758892381260654834766291426033656259864222374894266080151715699708742379732428215806373350187229838600127985836312625001471081142304194404623364268290281193143627469398869958820581
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9ed50c61e4997c3ebc95217100445e145cb0f72c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theheroinepidemic.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016eea06edf40000040300483046022100d419384e996d3a4fdda7982d0b99f63ea11517070f8fb906b826643fcd00fdcc0221009549f7d09cfe2ac592ce9ee36ba51a206936c8d9e736723cf264b2fc1e440fb800750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016eea06ee27000004030046304402201a262b261fdb106168e7e2a288f865569cc2b832530b4d3ac7ec4750b27efc52022068dc319f836cf5e9ff47249040ddbfa16972421a22f1a38fc3f62222ae7e07fc
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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