4mydomain.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:5c:71:06:66:2b:5e:85:f4:e3:03:f5:a2:43:12:c9:25:a7 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=4mydomain.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:5c:71:06:66:2b:5e:85:f4:e3:03:f5:a2:43:12:c9:25:a7
Serial Number (int): 292793071541553769376192146750878572422567
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 71:19:70:54:bb:ef:ee:4d:ba:5c:46:51:19:18:ad:79:7e:52:3e:64
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 04:cb:37:64:04:0f:f5:c2:b3:e6:bf:60:b0:9c:1f:25:00:e2:b1:97
Fingerprint (sha256): 38:e1:08:d5:49:70:33:e3:86:f3:85:fc:fe:25:48:ab:8f:99:51:d1:b5:2f:0d:3b:e7:22:d2:f9:c4:fa:58:01

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate 4mydomain.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for 4mydomain.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

4mydomain.com

Other certificates including the domain name 4mydomain.com

(limited to 100 certificates)
ze.4mydomain.com
4mydomain.com
4mydomain.com
4mydomain.com
4mydomain.com
zo.ns02.biz
4mydomain.com
toys.4mydomain.com
4mydomain.com
4mydomain.com
4mydomain.com
zs.isasecret.com
auria.ns01.biz
maquinamortifera.4mydomain.com

Certificate

The complete raw certificate details for 4mydomain.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 292793071541553769376192146750878572422567
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-29 14:04:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-27 14:04:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '4mydomain.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 912585701264588030614854758837081122028824643211175663694708289168945832623006956836410283240994874020381032253031815245756698899998577969253656089426238131804587974747592144072342072364299124595769757033397109499239024775160731272397181330193089861671750102887771144676193794753150315711399299185230696484443378141838908217240795089310590583531801187905636337644125418582970789584052132747488262366332993948610539021276803570792429134044309450983169371638427937961183870819446947450727446504114541864450559951659218593657399891609642805053157702856314664335483684188038446912822551973614842422280081882459493417565955364895736037836146639359273831537770520960294943626226575842062710461917404188127966618818510009653999895007449743883128035732851290249157458505921558956818623756028389127677570547141177330505738959352266366312093692142466469312694775421785038442843734119761499171729913232013483048417213957168544515291733134400791078078736082443093465402330200110673207885578075213588010563748316263860614250392593144955826895577610360952400823228707755534576505967380126086517188237997067423777408263190472069093107866190169190596914570986052421959404906077414025593584338398382256342551488154918733643600962918201213004939234041
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							71197054bbefee4dba5c46511918ad797e523e64
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '4mydomain.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc5600000166c05a91e0000004030046304402203f5af452205bf994c64a62e154556fc33b8ad833df57402f696eec3ecc672773022030da7e1ee487bdee83078a57cb0f0384539bf27018c5ec52f29239362d3112c8007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000166c05a91ec0000040300473045022001c5d8cc7358b8240afa449483c58b4b303927e44e19046890d492a3f0c56722022100bfd0b9e24007cdb9c4087dfb5d780b3ef462a854c02c407cbef0433202c0c1d1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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