www.eaglecreeknews.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:cd:30:2b:3b:c2:b3:bf:1f:8e:2e:10:4a:c2:ce:ff:4f:ec was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.eaglecreeknews.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:cd:30:2b:3b:c2:b3:bf:1f:8e:2e:10:4a:c2:ce:ff:4f:ec
Serial Number (int): 331158770438723776923172424111407226638316
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 86:2e:76:8a:ad:b8:45:8c:13:8b:93:7e:5c:7b:de:3c:1c:05:a4:48
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 0d:79:3f:cc:1d:ce:d8:2a:b4:ef:bc:d3:63:7f:02:93:0b:0d:71:85
Fingerprint (sha256): 3d:7e:73:f9:2d:af:59:4c:05:fe:34:4e:a1:71:f1:30:dd:a4:a3:79:5d:65:46:14:b1:1c:15:85:cd:f0:60:8d

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.eaglecreeknews.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.eaglecreeknews.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.eaglecreeknews.com

Other certificates including the domain name eaglecreeknews.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.eaglecreeknews.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAtB/0ZGj5R4slyK/9naoJ
0kW5nF4nHFcUEolo8YoZgRAdKQVXjbXzbHU7IYVoq6agyVggVlbMCbfc4DjYry3Y
xZkAt4oOQLA4hN7KtwrtEEOBsQwcfHOQzQhnd48xpZPf03VSBYHjjnQivV8Mm+za
4vvvBqss9HGJmzx3VEoTlo5iTkkU+qntc/qwHcaKS90y+99FGdjigpmzeVi+0/M+
0ch9BMEOqdcLd7murLTf7AMkcv7HdQFOiE3UQvTrWXYVcVV6UX0uQfmYMcpqKKa4
lATzCie2qr8RijBooPRwOzGW2AFa4cWWB2lVcpb0IsFyRZVLm5CTapHZzL4q7lNV
DFQh29ZPdZ4pNTZVJuVzL3SEe8ApEX3h7huKZ5Z2RriM7dzbfjDSOlT50WCwQYCc
6V5FI5WjtTpRL8HmMIeApf0BmwBY3uCmEUQbGsrqygSvBrfKGwThqouDJ231ktrg
otka3nXWIS5OEA1VEI+zW0xwXKt5cuP7cUjtUdQC8YDxaiCXo+3s8i8rG1UA2onS
ORAkD6qr91VIo3y3WZd1FNJ7c0Y7u0kgLVIU+7u3nTNmSasV7oxYbaK3rXvUM+S8
rX5KQT4HPayDFqwoKtxLVclfSawWsUvIaIJjG/DpbwXB8k35dghaavyKsW0wClxR
CyT1Hoy0hOWuSGMnDyrEBDsCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 331158770438723776923172424111407226638316
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-08 02:14:41 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-06 02:14:41 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.eaglecreeknews.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 734845165163270522825197255270220667909104032160427568344893632480327886006602954722573693604166207861055632051915513234727128192910727630165441717739324471441284094715059261144628318431096629131716418842453938119447695661134172627949758640337337975687788153618344463308704064145507105401784770650343394978941491904005411366169567401387930484753630312284206845863413165261387161911997187880025343427633374205220621035147538999652987260819510300299565185199465785367377428805198474575853929214412530086698797904414653195183892837072308966268425980666947108058563156975770822179704581305697376239102233544335490060082438708657275979820131779907732207744335188480234824373123362447538728845476460682131520280920777258224257821195593629922103588996540413479588637296318859575088917762430217670840168956811686573952797062069651012150743022621822567372267256757367250695241087578203417259973638383046176212459628336438832791028177144626487573326776633572448652212934424055958779495203609778920671471680269979680003925043981887067922937742973448438245998140896064106606052150241611444312559624837377493180882823963410396143576850012953199514033615925381501766426229749700062617927187639073114351908959713795589143754016844395335351496082491
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							862e768aadb8458c138b937e5c7bde3c1c05a448
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eaglecreeknews.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016c6f38adf40000040300473045022100b223bfffb87eb9836f373a8ee716bf434c2d8fee556460b03b5805b8754cd8f402200c3bc3acc9265e42111d017c9bb1fe3c0f57433214969b0183e2b64b8085cc6f007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016c6f38ae110000040300463044022059d8155cf02e815361d31cbb3c72c536806dd8803a45027d2108d39dcdedb46702202317cc3ec7972c423789b6ce5d54c4cb2c6edf630f4216c518b137f09b66f1d6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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