paternity.co

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:ee:3d:0a:7f:79:8f:12:ea:da:a6:c5:a7:03:ee:a2:37:e9 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=paternity.co

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ee:3d:0a:7f:79:8f:12:ea:da:a6:c5:a7:03:ee:a2:37:e9
Serial Number (int): 342405198538672466014802771104653434304489
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 4b:b5:f7:8e:ad:05:48:8a:c3:49:47:6b:4e:1c:c3:fc:41:3c:6c:9a
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 1a:7a:9c:4b:6a:dc:86:c2:ec:e5:58:6e:11:0c:11:1c:bc:40:1d:a5
Fingerprint (sha256): 23:2f:87:71:96:14:61:c6:b9:53:a7:a6:bb:7b:03:ad:1c:01:da:b8:03:bf:e5:3d:7c:e1:c4:f9:55:f9:97:ed

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate paternity.co

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for paternity.co

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

paternity.co

Other certificates including the domain name paternity.co

(limited to 100 certificates)

Certificate

The complete raw certificate details for paternity.co in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 342405198538672466014802771104653434304489
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-18 09:23:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-17 09:23:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'paternity.co'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 701529832728681689009156131152990001967086813807702479058247582010976889434265430563969661184437815047098574025475647980415229395359905249948756010685826647601337301020182775027376502930372652438599056711344017099204041385164634479587425692123345095063262533399194200570233290060120549976909280605476590016690619709734567063711153946502699153035494568069520499660104845561972819998327808388591236233154813016543098201827059828428093099703782111235576088925838585395087716236792405787176499812601168949324626217775458464300357294735096800418333025094379984436761149116004042941063533660908840520328414583865976266667913777600189598259752877962121466424109577047719011047316666889008895652121239303195883389169774368495978786503944802851668397477229044084092642124306139164707016861067114574953408333292010915391702322537464018589003096928317930413317966833153612367735476721155198180873378103387754474402607321631098238944751391382549150398582649936683605271299650595197354366965142351926617217376132683687481277489389196985712495517552736646454139334166010694573514061267931876223034803503175557824798132746749396794052504423791840307044287285645489332691597714176555398926867073976965109649741928153431670562027580081846646815102691
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4bb5f78ead05488ac349476b4e1cc3fc413c6c9a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paternity.co'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f20077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016d43e5dd980000040300483046022100d2075bfa74e582e6d6d51cdda3218963ce009a88fbf24d536b9a3238d970b28a022100dfb25250e3c7cd0b3178cf68867f57cc59b35143d23cb0c645d80fa63bf4036f00770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016d43e5dcd00000040300483046022100b152eb30f3a944dd3fcd720899cbb36e59431dae916ca7d437aebcc12557f602022100ad02e64d513fe09f4794c12715865d7563b30b639e7e83567b03a541aac5c0cf
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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