traversetolo.net

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:94:52:91:88:6b:37:8f:d9:9f:00:c9:e1:12:d2:66:77:25 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=traversetolo.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:94:52:91:88:6b:37:8f:d9:9f:00:c9:e1:12:d2:66:77:25
Serial Number (int): 311808400445180798249307846072871734900517
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ca:8f:9f:7b:40:c1:ca:50:94:a2:46:f2:28:a0:fa:d1:77:88:07:1a
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): a9:69:cc:f6:17:e2:19:d5:e8:d8:21:d6:33:5b:f8:22:89:99:b4:6a
Fingerprint (sha256): 35:d9:36:98:8b:a7:c3:a2:43:5f:a2:99:ab:ca:49:35:2d:35:cf:81:df:17:2b:6e:e3:4f:d9:90:71:12:39:c9

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate traversetolo.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for traversetolo.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

traversetolo.net

Other certificates including the domain name traversetolo.net

(limited to 100 certificates)

Certificate

The complete raw certificate details for traversetolo.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 311808400445180798249307846072871734900517
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-27 08:50:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-25 08:50:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'traversetolo.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 815676665131580362622522069087710360129723454891966989351628460375710134965066720893896704446285645020153688034402599875620439746331410878440768261734922251215357599809755532802158320743100784826064309803733426695314676779977178744647047292240681566965282161138768054922418275597715988270456718411715873059588782801493005020126651300804007338185183370207178509999212111993678467631519657861796231102240936528646802905715889597837373895612245423038501748695864242491216973678622324098944391936180241144667146496803124736696169171626679707582562744605046927670063731140734922235430726816202605918222234518248163386819431946144675553432701878145755359225500883181938197539776761598204609106200745995719051940450954464920450098171553455960341521553329084812426417951437304917683163321850306517129116918502192663161011465928508162797497586456293253729753068721626512735633446439501645510932608690834669790824188337525837642780031530087216965324069065843960643126907292536436649451110364233078838106067507854814601219825836070009226114815085776531293086034400938403470028202955590849137293548019357387918604435447825966925075061063308854585055126144162872582069374380113198462340609071030163828214230868003962152618318804271308760179456451
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ca8f9f7b40c1ca5094a246f228a0fad17788071a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'traversetolo.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016af8b2812e0000040300483046022100c80865194ba387464a3d77a52ea46453f2b63e0eff3b2b219dd8bdc3824ed3c50221008fae9f841708ea2e91040db5263e2f3725a9512676d453c5900b90bf5b535cee00760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016af8b28150000004030047304502201c441150f96204cb168d87b2f66732f779abe9f254633d7781c2debec22f4ce4022100889fce3488ac0bbe7b28e9eccc840125cd9cbc896d09e9b3a2c9ae126af433ce
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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