astroriver.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:b0:37:a1:d2:ff:90:ab:34:5b:b2:15:72:23:35:32:0d:df was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=astroriver.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b0:37:a1:d2:ff:90:ab:34:5b:b2:15:72:23:35:32:0d:df
Serial Number (int): 321300502152482275012655698228713259929055
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: a3:51:97:be:de:03:7a:f7:60:78:90:cc:e2:46:cc:e7:a8:fc:1f:09
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): b7:b2:3d:e3:7d:8a:ed:ae:82:c5:7e:50:38:a6:b7:41:ab:6d:f6:06
Fingerprint (sha256): 30:aa:6c:93:44:58:77:b5:ad:0b:6a:88:3b:ea:10:74:67:c2:bf:e7:a5:20:af:fc:05:b0:d9:d3:94:4b:ed:17

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate astroriver.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for astroriver.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

astroriver.com
www.astroriver.com

Other certificates including the domain name astroriver.com

(limited to 100 certificates)
astroriver.com
astroriver.com
astroriver.com
old.astroriver.com
sni89648.cloudflaressl.com
sni.cloudflaressl.com
sni89648.cloudflaressl.com
old.astroriver.com
astroriver.com
sni.cloudflaressl.com
jyotishjunction.astroriver.com
astroriver.com
sni89648.cloudflaressl.com
astroriver.com
astroriver.com
sni89648.cloudflaressl.com
astroriver.com
old.astroriver.com
astroriver.com
astroriver.astroriver.com
astroriver.com
old.astroriver.com
old.astroriver.com
astroriver.com
astroriver.com
astroriver.com
help.terawork.com
sni.cloudflaressl.com
astroriver.com
old.astroriver.com
astroriver.com
careers.astroriver.com
jobs.moverszone.com
astroriver.astroriver.com
astroriver.com
jobs.thecontingentplan.com
astroriver.com
astroriver.com
sni.cloudflaressl.com
help.makpools.com
destek.speedsignage.com
jyotishjunction.astroriver.com
careers.astroriver.com
support.astroriver.com
help.terawork.com
astroriver.com
jyotishjunction.astroriver.com
staging2.astroriver.com
jobs.thecontingentplan.com
app.expertsontap.com
astroriver.com
help.terawork.com
sni89648.cloudflaressl.com
careers.astroriver.com
jobs.thecontingentplan.com
jobs.nyflnerds.com
help.terawork.com
astroriver.astroriver.com
sni89648.cloudflaressl.com
jyotishjunction.astroriver.com
jobs.moverszone.com
staging2.astroriver.com
help.terawork.com
astroriver.com
jyotishjunction.astroriver.com
astroriver.com
astroriver.com
astroriver.com
help.terawork.com
help.terawork.com
jobs.thecontingentplan.com
jobs.moverszone.com
jobs.nyflnerds.com
talento.unete.org
sni89648.cloudflaressl.com
sni89648.cloudflaressl.com
astroriver.com
sni89648.cloudflaressl.com
old.astroriver.com
careers.astroriver.com
astroriver.astroriver.com
jobs.moverszone.com
careers.tridigitalmarketing.com
staging2.astroriver.com

Certificate

The complete raw certificate details for astroriver.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFaDCCBFCgAwIBAgISA7A3odL/kKs0W7IVciM1Mg3fMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAyMDQwNzM5MDlaFw0y
MDA1MDQwNzM5MDlaMBkxFzAVBgNVBAMTDmFzdHJvcml2ZXIuY29tMIIBIjANBgkq
hkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7meWSMquSBYzVE8pVOEnj5jPOYyGOfAA
nwgQWjpHlH6DO/Ip4wxv5N8EJwdybtKgfglDuVRZ+XFip3M4psfXNq1QLI0r1xit
AND1njmIK4Q7EYuU/TkoHp62H/RxQnFXIT3KZn5Zm2ZC9ZpqeUIQ3tXBHi4DNxde
I6E5YZLP7SksZHHCLI5am2GQV4BUJPP18OGpnms2BYdPHHJ0UkxNPqOkszcP1BuH
7zdVZDjYRrw62/kCRW3ciBw96DvHOYjFX3uOus1QGIJA+cMVDlcWsZ7OYdH5Fl4l
x9B9KNTqC593rkAbhmiImMJZ18oc07wbUedLufVbMpjYZAznFR9lwwIDAQABo4IC
dzCCAnMwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEF
BQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBSjUZe+3gN692B4kMziRsznqPwf
CTAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBvBggrBgEFBQcBAQRj
MGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5sZXRzZW5jcnlwdC5v
cmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5sZXRzZW5jcnlwdC5v
cmcvMC0GA1UdEQQmMCSCDmFzdHJvcml2ZXIuY29tghJ3d3cuYXN0cm9yaXZlci5j
b20wTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEF
BQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEEBgorBgEEAdZ5AgQC
BIH1BIHyAPAAdgDwlaRZ8gDRgkAQLS+TiI6tS/4dR+OZ4dA0prCoqo6ycwAAAXAP
Wm++AAAEAwBHMEUCIQDn1HR1Z75qBN4gD9vvjRJT17fqCUd+I36Bvr2cu2vU5gIg
eW4fRk1/6b6WmP5xh9r3OeOS5EM8QbKfC4Ja600b9kUAdgAHt1wb5X1o//Gwxh0j
Fce65ld8V5S3au68YToaadOiHAAAAXAPWm/tAAAEAwBHMEUCIDIW5LzNju5fbHLl
G02tLYF2HVY5yFO/raEZu+tR10y8AiEAkKjPIJ12gt/PIJRBcGYxThz1r7XlzAiu
Tree4IfRfsgwDQYJKoZIhvcNAQELBQADggEBACZ+I2jsfpYx4R5gz4WXz8L7g2oa
Hwj8ctLWnU0dKHDq9kM6Uq5g6+NAOhUQPdPfOkLyCj0FZF3EKocQNwxI0XTgOZqA
0Xj3svkX0JTEc23qIPN1GxLYHLpWrVSXpYkmnS8tBAhz0VPCIxDu5Qg8aHFruh2o
rgqD0/Kp7iwiYaf6+4SZIz8r6aGhSy4XcOm/VMVwumKKzhDaSkKijZD0dWEFfqX9
O8r7uI8yyBto4D9Y0AqkggLEqFoIY6+nMq4+3vLRYe/iOrTH2d8fC6tfHfHui42M
3kBY2yi2V0b2MtQIydqvsKNx+Wmt+cBKwf8S75oxFRaHYnfm5PXS4xgevUc=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7meWSMquSBYzVE8pVOEn
j5jPOYyGOfAAnwgQWjpHlH6DO/Ip4wxv5N8EJwdybtKgfglDuVRZ+XFip3M4psfX
Nq1QLI0r1xitAND1njmIK4Q7EYuU/TkoHp62H/RxQnFXIT3KZn5Zm2ZC9ZpqeUIQ
3tXBHi4DNxdeI6E5YZLP7SksZHHCLI5am2GQV4BUJPP18OGpnms2BYdPHHJ0UkxN
PqOkszcP1BuH7zdVZDjYRrw62/kCRW3ciBw96DvHOYjFX3uOus1QGIJA+cMVDlcW
sZ7OYdH5Fl4lx9B9KNTqC593rkAbhmiImMJZ18oc07wbUedLufVbMpjYZAznFR9l
wwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 321300502152482275012655698228713259929055
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-04 07:39:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-04 07:39:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'astroriver.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30095797259198957067020124773231656079573204906409908986130069024966856899053830790335691444808585354999928055846823407150627855295327951592779270403234326647622391165020171082984803481457976045418055001714048328951419251425202618737388533751067072829726335208177198592022205741790481016469780341645877143762243663440237149735251339465282292318624085843314736451279715704131021646954586066306027037338801709702897734727830167905431057113079991732562893806316768554938621527152450384940703885483324419833916082901431811823457810163966480957773095880268146563625392022054975280832836469808825654101691908186315799094723
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a35197bede037af7607890cce246cce7a8fc1f09
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'astroriver.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.astroriver.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb273000001700f5a6fbe0000040300473045022100e7d4747567be6a04de200fdbef8d1253d7b7ea09477e237e81bebd9cbb6bd4e60220796e1f464d7fe9be9698fe7187daf739e392e4433c41b29f0b825aeb4d1bf64500760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c000001700f5a6fed000004030047304502203216e4bccd8eee5f6c72e51b4dad2d81761d5639c853bfada119bbeb51d74cbc02210090a8cf209d7682dfcf2094417066314e1cf5afb5e5cc08ae4eb79ee087d17ec8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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