relaxnutrition.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:96:76:93:9f:f1:d0:cd:95:10:54:3b:46:19:36:1c:2c:c2 was issued on by Let's Encrypt.

With 28 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=relaxnutrition.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:96:76:93:9f:f1:d0:cd:95:10:54:3b:46:19:36:1c:2c:c2
Serial Number (int): 312536828248624069714364919754122707348674
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ac:e8:5a:97:46:ee:85:82:1a:2e:12:02:d2:72:b8:a9:6b:0b:a6:cb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 5b:f2:5e:62:52:3e:f6:b0:64:04:39:01:b4:44:2a:82:77:5c:b6:2b
Fingerprint (sha256): 36:51:53:c7:ec:2e:6f:b5:a8:16:ea:74:03:d1:27:72:f1:41:63:02:c8:d1:9d:1d:1a:31:50:6e:df:7b:ad:7b

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate relaxnutrition.com

28

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for relaxnutrition.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

arteexposition.com
barcelonatuition.com
chinatuition.com
demandtuition.com
dramacompetition.com
hometuition.com
marineacquisition.com
marineposition.com
nebraskatuition.com
neuralnetcamera.com
pennsylvaniatuition.com
relaxnutrition.com
santamonicatuition.com
vesselposition.com
www.arteexposition.com
www.barcelonatuition.com
www.chinatuition.com
www.demandtuition.com
www.dramacompetition.com
www.hometuition.com
www.marineacquisition.com
www.marineposition.com
www.nebraskatuition.com
www.pennsylvaniatuition.com
www.relaxnutrition.com
www.santamonicatuition.com
www.tikilaslamma.com
www.vesselposition.com

Other certificates including the domain name relaxnutrition.com

(limited to 100 certificates)
nebraskatuition.com
nanjingtuition.com
www.nanjingtuition.com
creative-composition.com
relaxnutrition.com
www.demandtuition.com
www.relaxnutrition.com
neuralnetcamera.com
www.vesselposition.com
pennsylvaniatuition.com
marineposition.com
openafinancialposition.com
www.creative-composition.com
www.regulatedopposition.com
www.marineposition.com
arteexposition.com
www.barcelonatuition.com
nebraskatuition.com
majoracquisition.com
www.majoracquisition.com
majoracquisition.com
www.pennsylvaniatuition.com
dramacompetition.com
www.seattletuition.com
marineposition.com
hometuition.com
www.seattletuition.com
www.maritimeacquisition.com
nebraskatuition.com
relaxnutrition.com
www.relaxnutrition.com
www.onlinecollegetuition.com
nebraskatuition.com
www.nanjingtuition.com
www.marineacquisition.com
www.pennsylvaniatuition.com
relaxnutrition.com
www.relaxnutrition.com
oceaniaprivatebank.com
nebraskatuition.com

Certificate

The complete raw certificate details for relaxnutrition.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyPHeO20g2IPzCSUw6Pgv
nAjBMiPGpqR0rNG0OVfGfEm8fJRKlbNG7Fp9GR/bsi+bNslV5M4VQeIJvgyWRoKz
so9lDqdJephmXt7eKYPkDI4HnFzY56GmVWkcOegnvkRBK8NERpi6UTcCg8PFf5EI
euU4BV8luV6yVrDqYYyspNmHKYL59tHkq3chxiwMD/tsaWhFSPR1OW9g6iZOdrWw
fsYdMJiQQsXrDi/a56nn0oUSNGQfekXALE5ibmY1dAPM0kFREoVE8kvP3QfIDO9+
GFUf2Xw9+tCsXMFjNrKiRxa93TI7ibUPZnG9NA0go2W7a9YtlFTloGejxIVF7C71
tQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 312536828248624069714364919754122707348674
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-20 11:50:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-18 11:50:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'relaxnutrition.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25366930595736756030886152098138188402552665515064813537003607927952512020392838681267168833569877330727310445891428544126905007853549462658255446473603895277701048927439822656546999306871446882843907926653252156247390735761196657279878847442980798912191861934003953364542869269793512866477997273275623115925685169396677054766799010428544956905153279489568956551513767954047294630868589008243287912402190302530759575639907204309976136451331994695656150479391424677972365304603858450844234425518199038034404709597374502304359656532920606324552770957648886618538024971953490041480336025126961633245384492676803506140597
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ace85a9746ee85821a2e1202d272b8a96b0ba6cb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (641 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arteexposition.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barcelonatuition.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chinatuition.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demandtuition.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dramacompetition.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hometuition.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marineacquisition.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marineposition.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nebraskatuition.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neuralnetcamera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pennsylvaniatuition.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'relaxnutrition.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'santamonicatuition.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vesselposition.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arteexposition.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.barcelonatuition.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chinatuition.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.demandtuition.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dramacompetition.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hometuition.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marineacquisition.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marineposition.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nebraskatuition.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pennsylvaniatuition.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.relaxnutrition.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.santamonicatuition.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tikilaslamma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vesselposition.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe000001699b26e066000004030047304502205c44b7afa3a88a7ae694d47f05ce36cc0af976b3abe8eaab0f620594492ca1f3022100abde7df1425538ffdb9a5915a0b2de090af1a172e0a7e3412fe9ece36a886196007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001699b26dec8000004030046304402201edb0a681e5283f86a1ac1313d871d14bfdaff9e6f0db7a8347174ac26def8a8022042e1650d6eb77cfad63e912eb542f7b5f77cc6d656e1e68835ead9283a7a881a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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