production-server.hosted.livingdocs.io

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:65:b2:4c:6b:cb:41:6a:a9:97:f2:11:ba:75:c7:20:55:25 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=production-server.hosted.livingdocs.io

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:65:b2:4c:6b:cb:41:6a:a9:97:f2:11:ba:75:c7:20:55:25
Serial Number (int): 295942376238427878475731679194609417737509
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e3:c6:68:91:cc:50:39:c8:f8:a1:9f:ab:3a:7f:1b:8c:c9:98:fe:ed
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): d7:2f:c7:9a:ad:a7:96:e8:b5:28:42:4e:51:29:21:4e:33:7d:39:e9
Fingerprint (sha256): 2e:84:05:db:b9:80:ea:91:2b:a2:e6:71:74:af:7d:e8:78:b5:06:a6:93:82:84:f6:0d:df:f0:09:54:ed:7f:94

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org/

Check the revocation status for certificate production-server.hosted.livingdocs.io

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for production-server.hosted.livingdocs.io

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

production-server.hosted.livingdocs.io

Other certificates including the domain name livingdocs.io

(limited to 100 certificates)
livingdocs.io
hosted.livingdocs.io
production-server.hosted.livingdocs.io
bluewin-poc-server.hosted.livingdocs.io
livingdocs.io
fup-ddv-server.hosted.livingdocs.io
ippen-server.hosted.livingdocs.io
docs.livingdocs.io
ippen-server.hosted.livingdocs.io
ippen-server.hosted.livingdocs.io
livingdocs.io
hosted.livingdocs.io
livingdocs.io
service-editor-production.livingdocs.io
livingdocs.io
vhtest0.hosted.livingdocs.io
magazine-example.livingdocs.io
bluewin2-server.hosted.livingdocs.io
docs.livingdocs.io
docs.livingdocs.io
hosted.livingdocs.io
docs.livingdocs.io
hosted.livingdocs.io
blog.livingdocs.io
livingdocs.io
livingdocs.io
concourse.livingdocs.io
fup-tsp-server.hosted.livingdocs.io
fup-ddv.hosted.livingdocs.io
staging.hosted.livingdocs.io
livingdocs.io
staging.hosted.livingdocs.io
staging-server.hosted.livingdocs.io
docs.livingdocs.io
forward.livingdocs.io
fup-dev-server.hosted.livingdocs.io
livingdocs.io
production-server.hosted.livingdocs.io
service-editor-production.livingdocs.io
service-editor-production.livingdocs.io
livingdocs.io
staging-server.hosted.livingdocs.io
fup-ddv.hosted.livingdocs.io
production-server.hosted.livingdocs.io
docs.livingdocs.io
fup-prod.hosted.livingdocs.io
docs.livingdocs.io
hosted.livingdocs.io
production.hosted.livingdocs.io
bluewin-poc.hosted.livingdocs.io
beta.livingdocs.io
livingdocs.io
hansmi0-server.hosted.livingdocs.io
hosted.livingdocs.io
livingdocs.io
fup-prod.hosted.livingdocs.io
livingdocs.io
livingdocs.io
fup-dev.hosted.livingdocs.io
livingdocs.io
vhtest0.hosted.livingdocs.io
livingdocs.io
hosted.livingdocs.io
rancher.livingdocs.io
production.hosted.livingdocs.io
hosted.livingdocs.io
livingdocs.io
*.livingdocs.io
cdn.livingdocs.io
htest999.hosted.livingdocs.io
livingdocs.io
staging-server.hosted.livingdocs.io
vhtest0-server.hosted.livingdocs.io
livingdocs.io
production-server.hosted.livingdocs.io
assets.designs.livingdocs.io
rancher.livingdocs.io
bluewin-poc.hosted.livingdocs.io
tobru1.hosted.livingdocs.io
ippen-server.hosted.livingdocs.io
hosted.livingdocs.io
staging-server.hosted.livingdocs.io
livingdocs.io
hansmi0-server.hosted.livingdocs.io
concourse.livingdocs.io
production-server.hosted.livingdocs.io
docs.livingdocs.io
livingdocs.io
hosted.livingdocs.io
bluewin-poc-server.hosted.livingdocs.io
livingdocs.io
livingdocs.io
fup-tsp-server.hosted.livingdocs.io
staging.hosted.livingdocs.io
docs.livingdocs.io
magazine-example.livingdocs.io
livingdocs.io
blog.livingdocs.io
livingdocs.io
service-editor-production.livingdocs.io

Certificate

The complete raw certificate details for production-server.hosted.livingdocs.io in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA3g+hb5yGtUY2CAWUY7JL
n7wo8KMCuMhDwbeJfuk+tMpKWYW18UPbCETUPbwrqT+nPENNyc11SA/w3e1QwAYZ
hnM84kT70jhyonki/ngiKZEmgE4TfiqIU44DRYtOYk572WAKjIUOOvY0Jxpt+0oW
DNZVkMVvpMko6aFPEneqDiDzxB88fkrx8iOiKI2mdMJqs/VAiV3qTtlBuiwPpZCE
uNDur5v1TEVYqhrHrmVquxK8QXqBp0k9RibXEHVvxKZspWqsq+Ds/SEobyJiTr3R
dx7rZZ+hVUQXjS9tlfwH+jLcQwB+GF9j0V2VyTzKN63LM712EFGgnqAIpAv+idfb
+DmvkLsBK5psym2r1ZBeykavWh4n9tTq+uV1mYJTmremg69lUtV37R2Et+WpOXzB
wPDPZ3yzBrMubrQiEJSFW4yHuZJfvtYdJ3E5NRDACUa4DVvFmKKFWcfYqN/3aST5
Ijw67xJzULivUaZ8YUx77Ho/GnAnnE4ANaOOz5GcD9yXW9FA/wGj5D1uStzpsqd3
jifb/z8+dpjCa5Jkm0H4JP64YMZ1jwkQSci65LOGq/6iAsMW6m6osA8S1mFG2cJ4
A7WCFLDoWUN27gpVf5amJPBdwhSu7afIxe27aHOxg+kjqnB5xRUvFMpT2/sngp/4
XiN9cdQpBhvT5aY1EHAciZcCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 295942376238427878475731679194609417737509
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-04-14 12:37:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-07-13 12:37:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'production-server.hosted.livingdocs.io'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 905930074204108049218695036195698800952730976306525701384460291738815872151665716362106932759938737876847928133488041576518246923282559488406841314929978754377767321681962526507596601418508845881220631806592316575388888699195335494910738870812399306714114615877545659236624371041183165815042894478202920999943540570523576352413456434093757568468225052088987743544191457942430893811819694607126635841340896786909301927341140657347370610451533698994855127369117035116622632259800421216119966504444243460107424643004474906735370290856799955244567236474427467039493088320028409300947005103233830320436302104577015516607319757228975815448158757175788411054846321451060514155696568074301166040559503905287126839685813185518942806859716936917435039832102019908855849708928767764152415858028269176405364574308211332514695158614538563308998644280533381387056281773924021653689630337401079614842818693396481024986187159716606412720822401881172385247141571840609947466287142866332044787499152971479372082929011175222009279537165342995092710217360024011317474035892189931920801294274284318294871308400747013052662530642439499358263920624071064151784837455857536248629004820078167995822446220230494516529514247604831452256080059273754459095468439
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e3c66891cc5039c8f8a19fab3a7f1b8cc998feed
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'production-server.hosted.livingdocs.io'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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