www.snailsites.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:c6:ec:2b:d4:c2:9a:17:92:4f:e9:20:63:a6:9a:c5:71:86 was issued on by Let's Encrypt.

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.snailsites.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c6:ec:2b:d4:c2:9a:17:92:4f:e9:20:63:a6:9a:c5:71:86
Serial Number (int): 329026691836685501538880543520644403655046
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 43:12:d8:02:83:4d:7b:3a:3a:c3:3c:90:c7:bd:d5:57:16:31:c6:51
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 95:25:0e:0f:2a:9a:f1:1c:26:4c:84:84:81:84:c2:68:e2:e8:1b:d9
Fingerprint (sha256): 30:65:f1:82:c0:76:d9:f6:9e:c9:21:42:72:5c:65:d8:83:97:cb:53:60:f3:3b:42:89:09:84:eb:7a:5e:77:54

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.snailsites.com

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.snailsites.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

snail-sites.com
snail-sites.de
snailsites.com
snailsites.de
www.snail-sites.com
www.snail-sites.de
www.snailsites.com
www.snailsites.de

Other certificates including the domain name snailsites.com

(limited to 100 certificates)
version.snailsites.com
vp.primaholding.snailsites.com
wgg-hgw.de
version.snailsites.com
anywhere.snailsites.com
vp.primaholding.snailsites.com
vp.primaholding.snailsites.com
vp.primaholding.snailsites.com
wgg-hgw.de
version.snailsites.com
www.snailsites.com
wgg-hgw.de
wgg-hgw.de
anywhere.snailsites.com
wgg-hgw.de
version.snailsites.com
portal.vp.primaholding.snailsites.com
vp.primaholding.snailsites.com
vp.primaholding.snailsites.com
vp.primaholding.snailsites.com
portal.vp.primaholding.snailsites.com
wgg-hgw.de
wgg-hgw.de
version.snailsites.com
portal.vp.primaholding.snailsites.com
version.snailsites.com
wgg-hgw.de
www.snailsites.com
vp.primaholding.snailsites.com
vp.primaholding.snailsites.com
www.snailsites.com
version.snailsites.com
www.snailsites.com
vp.primaholding.snailsites.com
vp.primaholding.snailsites.com
version.snailsites.com
wgg-hgw.de
version.snailsites.com
vp.primaholding.snailsites.com
wgg-hgw.de
wgg-hgw.de
vp.primaholding.snailsites.com
anywhere.snailsites.com
wgg-hgw.de
anywhere.snailsites.com

Certificate

The complete raw certificate details for www.snailsites.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 329026691836685501538880543520644403655046
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-29 17:58:40 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-29 17:58:40 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.snailsites.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 699736233552737925596912424758139215718626500364568969254411850296185873179479046590166645655120954793794262279808813546309670228642495998855641012862095112878303474908162262720097480993155256162470362448577466728468775286427901905725439932785652734577460171170878455998642668035038817873791731968490145947469644287864595716526135722613845705764857364244321951699323109268495167167798531120228344393189090445263036804545939076115667465201287142811153939493977837888825099293273350507411826263450343833886671893979004457724478142098692533084061155783267625518277300334715561548222022717666354888390900150946789166027264330130913281608981918114622029301708905834842615020456709029085904133351786295020653093497728992873080931941818512692165390503417813159368083437970899551404522517119637207808136046881300489531168862303929217565676217548118477318802729275069626459553842273953998567172208823904529194831177313761984058510251950620835230985589917552690978031416591725268955013859017355371246106398109793226164226068755230536279218200159284082985768641021136252845292683035757089397359644732517847232849652083391423073196412923955734480057990637669260751371793737507367799052343852345813388581533217140716812409407726508923703998500583
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:1|t:3|false]  
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (147 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snail-sites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snail-sites.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snailsites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snailsites.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.snail-sites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.snail-sites.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.snailsites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.snailsites.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000017092509780000004030046304402205e8b52dc50b58180785361e38a06dd70081de6eba33072d74db420e9e03e2e850220061efd40de214a67345bb7773b5f10000a563fedd1dfb55800914c119ab6b46e0076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000170925097b40000040300473045022018ef97bb0502177503141796fe284bd0af2d227bae19f81f96e90c41c06aa66f022100c0fada40f0ef954abd533a773e320250d7e1b5e703e8f478c370e53822bcfbf5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0013e72ebefdcd469646d01b4c772920934027b293dbb74cb8f85794f5635ca754c0a213e3b34fb95d94ebd98bee66c202641f673044e07830545d27f570d6c75e266138f191c57bc8c212e89b54a3fedd4290ba45df9aba962e96f90117b3c108075b490090c4ce6f9387b584f69a0c4b56b8dc032370c37ef2c77ddd8a5996cdc4bedd418c79e67333174f41772782dc61902591ee77ce71df0cd2e21b7cc2a498ce27f2c7d0ec5a184b0eb393f4e2534c8ecd6ebb548cc6a9c06949d2a64033492e339ef439f299a364539cfd9ab33e876cdf017614a361af1ddd87d39208e3b08e83727fb11f2c723d0b9979f7caea7f05783c13feaff930d58f52a2f3697b