abbigail.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:e3:5d:ec:0b:79:86:f4:17:fa:59:15:7c:f0:30:52:ce:ec was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=abbigail.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:e3:5d:ec:0b:79:86:f4:17:fa:59:15:7c:f0:30:52:ce:ec
Serial Number (int): 425818084836495508575024961170492290682604
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 0d:84:be:61:db:0a:36:00:2c:a0:14:31:6b:1a:a7:76:f1:c8:5f:fa
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 25:01:a4:97:aa:16:be:b4:df:68:ec:cf:54:c2:42:85:55:86:28:76
Fingerprint (sha256): 40:03:db:f7:aa:b5:1a:9a:ff:0b:c6:d7:c7:54:9a:51:05:8f:a4:6c:1c:6e:69:42:eb:19:b5:b8:51:18:f4:21

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate abbigail.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for abbigail.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

abbigail.org

Other certificates including the domain name abbigail.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for abbigail.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 425818084836495508575024961170492290682604
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-23 16:58:53 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-21 16:58:53 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'abbigail.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 835726423644284265571075065599877258436565523731464590426676098469698655768183233056320489075913688752595121938601428055037950719888385892415616866328806710652340002777852626424928426977325706255523884731788027057329415949209831058690451957925195977823206732581015317022141303919504957276315413694874026040094432900015447367765977773253697466859699709955560937495884718278525307918958507097805727538607747090974497880261295646049639036969753724982435929438329389568222391733974435268453291112837276081569207280309789427005056524358614172384751840015662042345872043973064800159276419274308816485752263022081599361560351247542441933783292743117130399036422381186344931817593778984376120467314440574691042630853135203272260510156999040835213183304547402560295352791184525325975552070200547725669901074905675170158722875032898939169664452255721258922687836525823886950147479849267043738306654052694835577474297382174023291874873459397687557626086390420286492915453538616967528567614882337357744383204752784493278523781813285278790547754129413153374841210784261576592453775125207787695524731289838321886893345273742397817385447361672818309983805750831161196488437749110187295008629388266116173287185885158802834713393771674314822484301339
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0d84be61db0a36002ca014316b1aa776f1c85ffa
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abbigail.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016df9c580ab0000040300473045022100f41cc4cf01a855312e553212f8c7ab6496ecdbeadad71f3a056f98c7666d3ec502207d641f106c2c0b7cfc68815dc4ebbf056617552da4b5006ce16bb7867a1e54ad00760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016df9c580a8000004030047304502201a12e41e386c2e8781797fc39480f090b28227f2498c5647cf560ca3079b740402210084c1cb914a5411cba9df93cb4c13215c0c837842f53b3a940f85baba42872f4c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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