scrippsnationalnews.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:f8:4b:24:f9:1d:e3:94:f8:4d:c6:e2:01:ef:5a:70:fe:f8 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=scrippsnationalnews.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f8:4b:24:f9:1d:e3:94:f8:4d:c6:e2:01:ef:5a:70:fe:f8
Serial Number (int): 345826768866732296036062981491301528174328
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ec:17:49:44:0a:84:51:13:bc:68:ca:5e:fe:3e:2e:c0:c1:e0:bb:25
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 0d:43:53:3d:fb:11:b5:02:57:0e:bf:b7:f7:94:0b:a6:fe:b2:41:b3
Fingerprint (sha256): 24:42:b9:2d:49:a0:eb:44:d2:91:70:8a:de:46:df:76:8a:7a:48:91:df:31:90:e9:c0:e2:95:d5:46:25:c3:06

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate scrippsnationalnews.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for scrippsnationalnews.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

scrippsnationalnews.com

Other certificates including the domain name scrippsnationalnews.com

(limited to 100 certificates)
lakana-02.map.fastly.net
scrippsnationalnews.com
*.scrippsnationalnews.com
*.scrippsnationalnews.com
*.scrippsnationalnews.com
scrippsnationalnews.com
www.1041kqth.com
mediaassets.scrippsnationalnews.com
scrippsnationalnews.com
*.scrippsnationalnews.com
*.scrippsnationalnews.com
sharing.1041kqth.com
scrippsnationalnews.com
scrippsnationalnews.com
lakana-02.map.fastly.net
*.scrippsnationalnews.com
scrippsnationalnews.com
mediaassets.1041kqth.com
scrippsnationalnews.com
lakana-02.map.fastly.net
lakana-02.map.fastly.net
scrippsnationalnews.com
scrippsnationalnews.com
scrippsnationalnews.com
scrippsnationalnews.com
*.scrippsnationalnews.com
scrippsnationalnews.com
scrippsnationalnews.com
*.scrippsnationalnews.com
scrippsnationalnews.com
scrippsnationalnews.com
mediaassets.scrippsnationalnews.com
lakana-02.map.fastly.net
www.1041kqth.com
scrippsnationalnews.com
www.1041kqth.com
sharing.1041kqth.com
mediaassets.scrippsnationalnews.com
*.scrippsnationalnews.com
*.scrippsnationalnews.com
sharing.1041kqth.com
scrippsnationalnews.com
lakana-02.map.fastly.net
scrippsnationalnews.com
*.scrippsnationalnews.com
*.scrippsnationalnews.com
sharing.1041kqth.com
mediaassets.1041kqth.com
lakana-02.map.fastly.net
mediaassets.1041kqth.com
lakana-02.map.fastly.net
lakana-02.map.fastly.net
lakana-02.map.fastly.net
scrippsnationalnews.com
*.scrippsnationalnews.com
mediaassets.scrippsnationalnews.com
mediaassets.1041kqth.com
mediaassets.1041kqth.com
scrippsnationalnews.com
*.scrippsnationalnews.com
*.scrippsnationalnews.com
lakana-02.map.fastly.net
scrippsnationalnews.com
*.scrippsnationalnews.com
www.1041kqth.com
lakana-02.map.fastly.net

Certificate

The complete raw certificate details for scrippsnationalnews.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsl8Z2WadTgQ5dMaXoR9r
OmLhKFL2PfORcYUfihQRWwyCQF8oBR9rSAUm9w4DhgzzmpExZGu0T4c8ozkPqesh
kzV03Kw5NiQJfhkGLrZID2/K/yMj6J+fCs1zh/fHZIc+EYdeYvUJ1ymMLTuLygli
9uuNJoeoKbqxtC/afoKl+XcmZDm/77Aa93e1At/FZuPhpQU3k9nzUP8PmoCT4Rt7
V6NmWuJYeDsDN8vjAscp1fMxvqJBAk6+pYPAkW7/HodvqUYJv6dXIydg88gU0BIV
ewtN+3wQatOmxyMNwHgHKJo3rMqn20mI/1BBUVi52XPLaOwPGgPc4SeBoly+6oLY
xQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 345826768866732296036062981491301528174328
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-25 02:09:16 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-23 02:09:16 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'scrippsnationalnews.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22517314321842153136638018472384208064927249052582397277465974417621096293972223907172897769797689279379105550082557782282745876282178992998838506197182281858931272699232708262627291251686658189611591312759439822719166971466344290483866485194277574259564382235236895637385243400028687268902410090556396989376137762273770549569348526787242553626963868672966760455940438059446033776800867925432521905365770437617430639976314541911266264952139552934802897652062873628725966130221815653140557368788935341261609191119477255851835277549448838332191195118224780485421534928593512233750138165434142180787980158420548757674181
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ec1749440a845113bc68ca5efe3e2ec0c1e0bb25
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scrippsnationalnews.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016c271ab17e000004030047304502207299b3a1725f3360b9e306699c2153fd1d4e3e6ae56f682039b70ff722560127022100e0b593c9b4b04069f5c279aed1bcedeea5b3d5b6a1199fbf4669060ffa8fdb88007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016c271aaf7c0000040300473045022100b0595f118bf09e3ca9e24142d02c7f3c2cc4522f643f0e2a99aec4383974332b022041efbb7702d3cab301d4da5bd8ec6beda1c9d0108f20732d2ca264e8cb9e120c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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