decaur.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:69:af:d6:df:bb:71:91:ff:41:fe:d6:26:67:ed:e0:11:cd was issued on by Let's Encrypt.

With 20 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=decaur.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:69:af:d6:df:bb:71:91:ff:41:fe:d6:26:67:ed:e0:11:cd
Serial Number (int): 297300236910597521644661150237232264647117
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 26:37:8d:78:f0:a4:eb:4f:03:60:12:22:7c:84:17:f8:c2:f4:0e:e9
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 8c:24:f9:d7:c9:d1:12:e7:44:fa:50:31:49:d8:bc:28:5c:5b:87:23
Fingerprint (sha256): 2a:4f:2d:58:c8:05:aa:e4:62:dd:4f:26:c1:81:2b:df:05:da:23:34:03:d9:39:d1:f7:cf:1d:01:12:3e:f8:ce

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate decaur.com

20

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for decaur.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

albatin.i3world.com
albatin.net
decaur.com
decaur.i3world.com
mail.albatin.net
mail.decaur.com
mail.sourcyness.com
mail.themindx.org
sourcyness.com
sourcyness.i3world.com
themindx-org.i3world.com
themindx.org
www.albatin.i3world.com
www.albatin.net
www.decaur.com
www.decaur.i3world.com
www.sourcyness.com
www.sourcyness.i3world.com
www.themindx-org.i3world.com
www.themindx.org

Other certificates including the domain name decaur.com

(limited to 100 certificates)
decaur.com
decaur.com
decaur.com
decaur.com
alidina.me
decaur.com
autodiscover.decaur.com
mail.shuwf.com
decaur.com
hassanasani.com
albatin.net
decaur.com
decaur.com

Certificate

The complete raw certificate details for decaur.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4EGRbe67IiB6ZxNvOu4J
pqkFoV5PEUEaOuQw7hTqEc75W2+xPFFHIgrGxxzdtfqHafVfwKDMeqYt3xC2acvi
aWk34GwD8McGV7ssYBsQ5krjEop4omJRO36aHN4ylMQI2EXzeQf2Mk9eJ/5DFBTU
xGDqj/fdXIdjXDcHSHxUAeUqksmueSZkab6rIogSXCvbqhl528kQT5ui7LTenpN/
kgDeHpjoOzNPs00vQ0tJ2Zhnrv8npVLwimqolaD0VsRPk2A1T/1ZC3z6M/OIuPpu
kJJKXzzsHz/qABAraG/juivPYf4qbrEgEjyG+o34uXAovcdKixGAaWR81FkKkTh/
NQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 297300236910597521644661150237232264647117
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-15 12:25:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-13 12:25:03 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'decaur.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28309713139524399407780798506043527932116241737816863622629171751454938751670895269328993002751449934432957823596459174428552808439477129150839931729683954462114950363015651884920594693957579284244944984351541079810699613414490449575547917408233303371348962434259862036498752093714241443527697538294526528912300999281622115648866829434791216833513123785361390709463900673821682563229741041700175257502694752976824003332603046830889379889510650309042445418100273512127239303247037757159932626917819160882377638058572597434152557949126421336508245437244228062986831987145279282703252856604475205798770278575795313606453
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							26378d78f0a4eb4f036012227c8417f8c2f40ee9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (403 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'albatin.i3world.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'albatin.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'decaur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'decaur.i3world.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.albatin.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.decaur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.sourcyness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.themindx.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sourcyness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sourcyness.i3world.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'themindx-org.i3world.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'themindx.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.albatin.i3world.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.albatin.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.decaur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.decaur.i3world.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sourcyness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sourcyness.i3world.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.themindx-org.i3world.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.themindx.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016e6f3d124e00000403004730450220223b91e2bec65cf92a47fde16a04ec6406439158c3c799e3923b0f04d911681b02210097da29d261f0983a36e2bba444f7b84944663af1628fef342daa950ef0e62d5f00760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016e6f3d1291000004030047304502210097fb87caa992c977fff95494d289f000ea2bfbd6baba7be7d031c6c71f7dd7ec0220213861b3c1794eca25358247989de111869f917bdf96a2f99cd443021f4946b5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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