www.familytreeprints.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:c2:b0:77:8a:70:c6:42:f0:94:aa:fa:ff:c6:3a:c3:81:0e was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.familytreeprints.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c2:b0:77:8a:70:c6:42:f0:94:aa:fa:ff:c6:3a:c3:81:0e
Serial Number (int): 327586201796434551152572477177945519259918
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 7c:96:ad:84:70:dd:22:75:61:8f:53:a9:a3:58:4e:73:57:10:f6:9c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): cd:b1:2a:80:a0:64:ee:df:80:f9:2f:83:38:ea:b8:23:11:8a:a9:91
Fingerprint (sha256): 3b:5d:ab:9e:63:ea:08:71:ee:27:e9:63:54:c4:0a:f4:28:37:79:9d:bf:b0:ef:ff:90:7b:4d:73:9f:2e:6c:47

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.familytreeprints.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.familytreeprints.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.familytreeprints.com

Other certificates including the domain name familytreeprints.com

(limited to 100 certificates)
panorama.flurweg.app
www.familytreeprints.com
www.datetimeutil.com
familytreeprints.com
ayg-villa.pedix.app
familytreeprints.com
puja.de
lunch24.com
www.mathpass.app
artifutech.com
godutch.app
contempowebdesign.com
devfest.vn
www.familytreeprints.com
ai.koneqt.com
www.familytreeprints.com
rankcountry.com
familytreeprints.com
setalag.ch
app.dev.dronelink.com
familytreeprints.com
familytreeprints.com
www.jomart.co
familytreeprints.com
www.natewickstrom.com
familytreeprints.com
app.familytreeprints.com
www.aaronte.com
familytreeprints.com
dev.streamlion.app
app.deckk.co
sni.cloudflaressl.com
sni.cloudflaressl.com
ailepro.com
familytreeprints.com
www.familytreeprints.com
familytreeprints.com
www.familytreeprints.com
familytreeprints.com
app.alimnee.com
familytreeprints.com
familytreeprints.com
familytreeprints.com
sni.cloudflaressl.com
familytreeprints.com
blazeui.com
www.playne.se
familytreeprints.com
www.familytreeprints.com
www.familytreeprints.com
www.drvidyasagarc.com
www.familytreeprints.com
www.familytreeprints.com
familytreeprints.com
www.familytreeprints.com
www.familytreeprints.com
www.growthcircles-webapp.com
www.familytreeprints.com
www.perfaqt.com
www.familytreeprints.com
app.familytreeprints.com
www.familytreeprints.com
tap.bio
www.familytreeprints.com
familytreeprints.com
www.familytreeprints.com
mattec.se
familytreeprints.com
gatesolutions.org
www.familytreeprints.com
familytreeprints.com

Certificate

The complete raw certificate details for www.familytreeprints.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA17kK6NAbU4SYrqdpS6JD
z7yXBiuVpT+exK7Likky0qkGO1Hhn9ung7hWqii8KADyAjO29wYZ/rOLyNLe/ljG
WVg2ffvxtIUEGTR/YRhnIZqvDSzfksivRB7I7J6rfqOhW1Nn1cgETddlYs3qw8gC
+H95PVtxkGaoT+Wmvd2D2T6t0PYJEJasPfhyypz/j4+5lVGBbiSAMErqAPrHFwzv
1sGZvl77V7IYsA471oYH4pESJ+TGxEMJKs33U8wNQkbZASzF2ZEKG5kqulZQ+ts2
6GF8mvg8gLlB1vSMxMeqUoYSOI9eZnQBSyXKla6XSP3tm+WbKTxnMxBO8VleDLhQ
CwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 327586201796434551152572477177945519259918
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-05 10:48:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-03 10:48:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.familytreeprints.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27232483481987429966676296577408173221639062368657299946735742429379695540392441080966244991087449512502107225078331531849912017124909686645568661753616106620999882055190460419664152057602711009911576786928429981066707077553717438079549191204958638913327678151936963698064181039870166530559099818611115909456297282704024443376677169245127580948377466857299511953121682754878443026988642924149618248932206823130629280740420717341236128366001301630236431976115824143051515307031288329174462874932860007175996575290821781733986835137905196527878509089477402251690122071291321877659499583798473566281732783850523582812171
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7c96ad8470dd2275618f53a9a3584e735710f69c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.familytreeprints.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf640000016509ea91040000040300473045022100a716c120e2a5168b49c52785cab70c6e1dc77c8aaaca97687a50ff26daff277602207434fee16ccb253e2df73bf0793150b567cc0095aee4d3edd65d3a5be4626041007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016509ea91140000040300483046022100f3a1c385acc7aa677f584a9851c2163f3b439e8bf8700a5fd7ffaf21915a8ec5022100dccb7ecba4a45dc1a49c875c5d2079f2e5bad4cbf5f505bcbc5e414e7ac9990e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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