www.testimonedigeova.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:3a:e6:46:bd:5b:12:aa:a9:d7:e8:58:4c:7a:0d:e0:d1:ee was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.testimonedigeova.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:3a:e6:46:bd:5b:12:aa:a9:d7:e8:58:4c:7a:0d:e0:d1:ee
Serial Number (int): 281379324817096753838041909839007253058030
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 80:2a:c0:8e:25:97:7d:e3:19:40:f5:67:98:62:14:99:90:29:2e:cd
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 25:eb:ad:37:68:51:64:b5:bd:3e:f4:87:3b:ce:ca:5b:b7:82:57:d5
Fingerprint (sha256): 3f:32:82:58:e9:27:d0:55:0a:43:17:84:93:05:40:5d:06:fc:62:3d:ff:4a:66:75:9e:f7:e6:8a:10:b5:e9:87

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.testimonedigeova.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.testimonedigeova.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.testimonedigeova.org

Other certificates including the domain name testimonedigeova.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.testimonedigeova.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGaDCCBVCgAwIBAgISAzrmRr1bEqqp1+hYTHoN4NHuMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA2MTgwMjUxNDZaFw0x
OTA5MTYwMjUxNDZaMCMxITAfBgNVBAMTGHd3dy50ZXN0aW1vbmVkaWdlb3ZhLm9y
ZzCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAMhB9MAgZDgpLosa2nRW
KtKvexXqfowi8ijPdRqaunyPfZB+kluEC07UzIk3N00HQKvUxeKcZj4pKz0I0I0k
bVqeHBThUHQtaYIQp15j7hIoLyCWFrB5bF4Ecen4k9ngaK6CSdceCC998A0nDIhJ
7IRpN/yh5AENY3edNQqCfvuqwBh+XZ/ptkwqoYynsEHtErOgtQNo9/Hc8Y8hMphW
ZG2uhmstJp7H03hnG5HDBkWVfEUyCYEf9+78ObTCPFKcPBMdXrEPspy74KxjQp82
cMXzPpnzSt6H7G9+1yMyXXw3FO/nRWBknGaGrOjKncuDNF5bt/AJdO1B+rdj05q7
o8fN5HqZX1mtAs026KRCUDdly7ibv/++ZZxgGAetDtwJ6grErjXbomohLYfEmBHK
plpVA68EoXZmXDheR31Bhp0N/Bo/LjGlUq9FD2dJlGY0FKWv4qQYAgllWKIhUBg3
AX2LJJCjOeLiZFxWUMGRasiZCLzAmpdbAKt5ESNwHHsCO/Ef8RSrx8DX/HIJOWFT
M6tlSarHypCwCKXoWgduIZLzA3ie3z38EwElP21vhtByXO5e2bhDDJAEGggfn1LD
OLCI+SQSv9KTkfJ6kMR9ErULzBAzmU58mhPCGC30+goWdPk/l2ZMNAo3s1E2f9x+
Xpja5AOf9wTGd9/11B7Ug3g5AgMBAAGjggJtMIICaTAOBgNVHQ8BAf8EBAMCBaAw
HQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYD
VR0OBBYEFIAqwI4ll33jGUD1Z5hiFJmQKS7NMB8GA1UdIwQYMBaAFKhKamMEfd26
5tE5t6ZFZe/zqOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDov
L29jc3AuaW50LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDov
L2NlcnQuaW50LXgzLmxldHNlbmNyeXB0Lm9yZy8wIwYDVR0RBBwwGoIYd3d3LnRl
c3RpbW9uZWRpZ2VvdmEub3JnMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQB
gt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3Jn
MIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDwAHYAdH7agzGtMxCRIZzOJU9CcMK//V5C
IAjGNzV55hB7zFYAAAFraLZNqgAABAMARzBFAiEAq+GMDEMMDKNNROUXF3bi5QEd
p2OO5aE9i2+tnMubMu4CIDMU9DXn5j3pJak+ahL4R1CAV+gX9F/FDBKJBi16jTu/
AHYAKTxRllTIOWW6qlD8WAfUt2+/WHopctykwwz05UVH9HgAAAFraLZNygAABAMA
RzBFAiEA9FCBGBbPuaCfg6PkH7Yv+dEO3L0X1yNsDj+LBwx1TacCIDSfjAQ776Ft
e78xRAdES7Cv97eek3NAYOoA4IWFW16rMA0GCSqGSIb3DQEBCwUAA4IBAQAa5V4u
KcyUMxk7bX/QwcVnuLN9R7p6JLumwbx4PA/ANUU8k04/kT8qEauD/2d4BRfRai1f
iWX5vr6o6tb817Fvakkl7LTYtRa8oqoCSyc9QMaS4NkrPIYmKpmDleegkVFnew12
0X45c/6/+GVeSHr4x7Os3LwD5P5ocBW0nL+BxXfXc1DLFolnx0/GQAfb2AqMQqU7
qXRsksqstztOHsiPSCjYY62Vdf3T1zWyh7jNpMpJAnNyKZ3m7swtLWc2jGvL+w7F
ZtontRJXZAzk8uoCgje+spBto8ujd8/E7uJiODcOWG70ktQb6SvIUZ8Q1vvrpQYU
0IRFpB35qGFk1Wyt
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAyEH0wCBkOCkuixradFYq
0q97Fep+jCLyKM91Gpq6fI99kH6SW4QLTtTMiTc3TQdAq9TF4pxmPikrPQjQjSRt
Wp4cFOFQdC1pghCnXmPuEigvIJYWsHlsXgRx6fiT2eBoroJJ1x4IL33wDScMiEns
hGk3/KHkAQ1jd501CoJ++6rAGH5dn+m2TCqhjKewQe0Ss6C1A2j38dzxjyEymFZk
ba6Gay0mnsfTeGcbkcMGRZV8RTIJgR/37vw5tMI8Upw8Ex1esQ+ynLvgrGNCnzZw
xfM+mfNK3ofsb37XIzJdfDcU7+dFYGScZoas6Mqdy4M0Xlu38Al07UH6t2PTmruj
x83keplfWa0CzTbopEJQN2XLuJu//75lnGAYB60O3AnqCsSuNduiaiEth8SYEcqm
WlUDrwShdmZcOF5HfUGGnQ38Gj8uMaVSr0UPZ0mUZjQUpa/ipBgCCWVYoiFQGDcB
fYskkKM54uJkXFZQwZFqyJkIvMCal1sAq3kRI3AcewI78R/xFKvHwNf8cgk5YVMz
q2VJqsfKkLAIpehaB24hkvMDeJ7fPfwTASU/bW+G0HJc7l7ZuEMMkAQaCB+fUsM4
sIj5JBK/0pOR8nqQxH0StQvMEDOZTnyaE8IYLfT6ChZ0+T+XZkw0CjezUTZ/3H5e
mNrkA5/3BMZ33/XUHtSDeDkCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 281379324817096753838041909839007253058030
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-18 02:51:46 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-16 02:51:46 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.testimonedigeova.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 816979896553761212243247932692776952872898419447705722182556282891607399378484200025304761052248576903579824361729191593966748005631041292616957935194767846058515886882306960215016669682648396862361557945646621389512371251143231222940224834410176782665051490940042830175694547820631405417210636903359508432807424856628026009078980151769840628399843213025927409299985896109428267498413953332821979649379458212752818142785067218137575663201123460085628127035534462367367899880075718674213048261488445854415110591749197874810681289318537865910772857759611279073663106906820092176319402299853749072823737901530057529326737404874217137304102428866425132403685632417112471769083350345611835974545702294673268145374453936874988106083619969733489552679386472201466877658787177925332520299229639298853338785942476786534301555922017120237161178018061791843284338619442220600766555645142200202218925651499619351805576237085373724027522542869531917431997249681435051349888296948147135304910043023539235821496443279722745774777468337613137530726972207906910516507250951602214388013291812901731322140306258249597117963220442765601632816609899471511768526187344629390275004684737363770230070558308923225124638464303353755254635844582980605167499321
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							802ac08e25977de31940f5679862149990292ecd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.testimonedigeova.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016b68b64daa0000040300473045022100abe18c0c430c0ca34d44e5171776e2e5011da7638ee5a13d8b6fad9ccb9b32ee02203314f435e7e63de925a93e6a12f847508057e817f45fc50c1289062d7a8d3bbf007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016b68b64dca0000040300473045022100f450811816cfb9a09f83a3e41fb62ff9d10edcbd17d7236c0e3f8b070c754da70220349f8c043befa16d7bbf314407444bb0aff7b79e93734060ea00e085855b5eab
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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