abbigail.org
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 04:e3:5d:ec:0b:79:86:f4:17:fa:59:15:7c:f0:30:52:ce:ec was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=abbigail.org
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:e3:5d:ec:0b:79:86:f4:17:fa:59:15:7c:f0:30:52:ce:ecSerial Number (int): 425818084836495508575024961170492290682604
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 0d:84:be:61:db:0a:36:00:2c:a0:14:31:6b:1a:a7:76:f1:c8:5f:fa
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 25:01:a4:97:aa:16:be:b4:df:68:ec:cf:54:c2:42:85:55:86:28:76
Fingerprint (sha256): 40:03:db:f7:aa:b5:1a:9a:ff:0b:c6:d7:c7:54:9a:51:05:8f:a4:6c:1c:6e:69:42:eb:19:b5:b8:51:18:f4:21
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate abbigail.org
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for abbigail.org
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
abbigail.org
Other certificates including the domain name abbigail.org
(limited to 100 certificates)
Certificate
The complete raw certificate details for abbigail.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgISBONd7At5hvQX+lkVfPAwUs7sMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEwMjMxNjU4NTNaFw0y MDAxMjExNjU4NTNaMBcxFTATBgNVBAMTDGFiYmlnYWlsLm9yZzCCAiIwDQYJKoZI hvcNAQEBBQADggIPADCCAgoCggIBAMzaT7VJWYcSVbGWl3C0q7wLs9yYaagwuH5c 9BokhNe+E52AIQOvuMjW1N5+kI6OKC9o8cVdVqeGvt6UxypR/XzHYs/gKAvwO7Xc cBK76L+OyYQ7JRK+vXvpQmAGS14+jyFKsJmWCmJKu8Q1VKhFydO2zOv6MtUdeYTE sljSlpLBY6h/Pnt3m/Iq69ROTg1GB1Lmqfp1YhluROO5vEKjGAUGZPlOXUBtQf8V esma0eR/Lv5CQO7nm5zh0ceODQCJozSbGFI7cupdVdhhmqgDIKgL9NTDYYuchWA2 qEX3b3F4Vd2SIIGDnFJYmjHqEUBpopC1XGEZccrcMhcjDg9Z5CXzyxN4uhAYrBU3 VV12UzwwGz1GSD5o3oqoqCri8xFXGl56CAzie3whXPEYxw/JB/bmGo31+AlAbPl6 ZFFjf/zcwFypfSPLGMgOWvRoCiYLkbm1VPdlVUXo72UZ1vkPIjM9tnCZBkpcGv3M kcmORlVI1qX48RSYO2UztZuudW7hST3xAK40+Jhr+m0C6aiovG+8Zd7nfxbS0HIR JJ5QHeChnoIzwUWxwZ5UXQ/j4ofDferzz5U02fK/u4YYnqFak1okR55+DdUCaRLY /o9giggpWn4/yDeuOdfTkUgU/wpaFL2+1MV6Bj1IbMARglFqt+Xo3qyX7MUpFCV4 2q/DwRYbAgMBAAGjggJhMIICXTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYI KwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFA2EvmHb CjYALKAUMWsap3bxyF/6MB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyh MG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgz LmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgz LmxldHNlbmNyeXB0Lm9yZy8wFwYDVR0RBBAwDoIMYWJiaWdhaWwub3JnMEwGA1Ud IARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0 dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDw AHYAb1N2rDHwMRnYmQCkURX/dxUcEdkCwQApBo2yCJo32RMAAAFt+cWAqwAABAMA RzBFAiEA9BzEzwGoVTEuVTIS+MerZJbs2+ra1x86BW+Yx2ZtPsUCIH1kHxBsLAt8 /GiBXcTrvwVmF1UtpLUAbOFrt4Z6HlStAHYAB7dcG+V9aP/xsMYdIxXHuuZXfFeU t2ruvGE6GmnTohwAAAFt+cWAqAAABAMARzBFAiAaEuQeOGwuh4F5f8OUgPCQsoIn 8kmMVkfPVgyjB5t0BAIhAITBy5FKVBHLqd+Ty0wTIVwMg3hC9Ts6lA+FurpChy9M MA0GCSqGSIb3DQEBCwUAA4IBAQBOxQlkq+swviLMwRzHVklg0y778Kg93SAO2+eI 641H6GXOT1t1QwKzDC4Eu4SqNfOJ/Iml8o49VGpKam7IRVNUzljc+Z+NEJ51jEku WP3nrEyefr5Luxv6Iv4iZrz0e40N+QFFxIbVVPtDnd0z5WtrZ1NDFITurX4v8VCs r7VNhG7ziquJHwt0RsgOedGzAqNEq/pkx2d7Q6LtfAbqVAX5tMVxEpcm9LxPz79/ Zw7Y2OHFMdsLdCt1fy93PZvkHu5DDHlr1wOa5PZMx/AfuTILpTxrQ/MC4CJ3hTqt Izoo/TEP3qO0vHlAbj0unzZeybeHM8LEB5kCJti8LFzGceYL -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAzNpPtUlZhxJVsZaXcLSr vAuz3JhpqDC4flz0GiSE174TnYAhA6+4yNbU3n6Qjo4oL2jxxV1Wp4a+3pTHKlH9 fMdiz+AoC/A7tdxwErvov47JhDslEr69e+lCYAZLXj6PIUqwmZYKYkq7xDVUqEXJ 07bM6/oy1R15hMSyWNKWksFjqH8+e3eb8irr1E5ODUYHUuap+nViGW5E47m8QqMY BQZk+U5dQG1B/xV6yZrR5H8u/kJA7uebnOHRx44NAImjNJsYUjty6l1V2GGaqAMg qAv01MNhi5yFYDaoRfdvcXhV3ZIggYOcUliaMeoRQGmikLVcYRlxytwyFyMOD1nk JfPLE3i6EBisFTdVXXZTPDAbPUZIPmjeiqioKuLzEVcaXnoIDOJ7fCFc8RjHD8kH 9uYajfX4CUBs+XpkUWN//NzAXKl9I8sYyA5a9GgKJguRubVU92VVRejvZRnW+Q8i Mz22cJkGSlwa/cyRyY5GVUjWpfjxFJg7ZTO1m651buFJPfEArjT4mGv6bQLpqKi8 b7xl3ud/FtLQchEknlAd4KGegjPBRbHBnlRdD+Pih8N96vPPlTTZ8r+7hhieoVqT WiRHnn4N1QJpEtj+j2CKCClafj/IN64519ORSBT/CloUvb7UxXoGPUhswBGCUWq3 5ejerJfsxSkUJXjar8PBFhsCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 425818084836495508575024961170492290682604 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-23 16:58:53 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-21 16:58:53 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'abbigail.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 835726423644284265571075065599877258436565523731464590426676098469698655768183233056320489075913688752595121938601428055037950719888385892415616866328806710652340002777852626424928426977325706255523884731788027057329415949209831058690451957925195977823206732581015317022141303919504957276315413694874026040094432900015447367765977773253697466859699709955560937495884718278525307918958507097805727538607747090974497880261295646049639036969753724982435929438329389568222391733974435268453291112837276081569207280309789427005056524358614172384751840015662042345872043973064800159276419274308816485752263022081599361560351247542441933783292743117130399036422381186344931817593778984376120467314440574691042630853135203272260510156999040835213183304547402560295352791184525325975552070200547725669901074905675170158722875032898939169664452255721258922687836525823886950147479849267043738306654052694835577474297382174023291874873459397687557626086390420286492915453538616967528567614882337357744383204752784493278523781813285278790547754129413153374841210784261576592453775125207787695524731289838321886893345273742397817385447361672818309983805750831161196488437749110187295008629388266116173287185885158802834713393771674314822484301339 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 0d84be61db0a36002ca014316b1aa776f1c85ffa . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abbigail.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f00076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016df9c580ab0000040300473045022100f41cc4cf01a855312e553212f8c7ab6496ecdbeadad71f3a056f98c7666d3ec502207d641f106c2c0b7cfc68815dc4ebbf056617552da4b5006ce16bb7867a1e54ad00760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016df9c580a8000004030047304502201a12e41e386c2e8781797fc39480f090b28227f2498c5647cf560ca3079b740402210084c1cb914a5411cba9df93cb4c13215c0c837842f53b3a940f85baba42872f4c . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 004ec50964abeb30be22ccc11cc7564960d32efbf0a83ddd200edbe788eb8d47e865ce4f5b754302b30c2e04bb84aa35f389fc89a5f28e3d546a4a6a6ec8455354ce58dcf99f8d109e758c492e58fde7ac4c9e7ebe4bbb1bfa22fe2266bcf47b8d0df90145c486d554fb439ddd33e56b6b6753431484eead7e2ff150acafb54d846ef38aab891f0b7446c80e79d1b302a344abfa64c7677b43a2ed7c06ea5405f9b4c571129726f4bc4fcfbf7f670ed8d8e1c531db0b742b757f2f773d9be41eee430c796bd7039ae4f64cc7f01fb9320ba53c6b43f302e02277853aad233a28fd310fdea3b4bc79406e3d2e9f365ec9b78733c2c407990226d8bc2c5cc671e60b