piwik.apps.a93.me

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:58:ed:22:85:41:1a:42:e4:bd:cd:5f:ae:56:13:fc:1d:28 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=piwik.apps.a93.me

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:58:ed:22:85:41:1a:42:e4:bd:cd:5f:ae:56:13:fc:1d:28
Serial Number (int): 291596912360135975299325825600427879308584
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b5:fb:c8:a4:31:34:1e:58:13:27:15:e3:d9:de:62:e4:44:76:a8:06
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): e2:20:6b:f9:6f:84:34:e4:85:e7:d4:9a:72:58:ba:7b:6b:e9:b4:34
Fingerprint (sha256): 41:d6:1b:10:4e:dd:ec:ac:e6:37:db:ab:5f:0e:b1:d4:31:97:ac:ca:e3:f2:62:49:db:91:0a:42:74:1e:d7:82

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate piwik.apps.a93.me

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for piwik.apps.a93.me

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

piwik.apps.a93.me

Other certificates including the domain name a93.me

(limited to 100 certificates)
calmerge.apps.a93.me
adambrenecki.apps.a93.me
pythonadelaide.apps.a93.me
calmerge.apps.a93.me
piwik.apps.a93.me
piwik.apps.a93.me
adambrenecki.apps.a93.me
calmerge.apps.a93.me
piwik.apps.a93.me
calmerge.apps.a93.me
adambrenecki.apps.a93.me
piwik.apps.a93.me
adambrenecki.apps.a93.me
piwik.apps.a93.me
pythonadelaide.apps.a93.me

Certificate

The complete raw certificate details for piwik.apps.a93.me in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAt9qGviBf2lrtPpE4P2yY
sRIHMyVIz82BKf5eq73S+K04qzvcHKWwLzNizMCjxI/QE6mO0s+FaN9ZQLijp0Pg
9ZHjU/TDKKzWGklFFIsP1uqJAySfC9NrbaRCZA5ku9qrIIxXojkcCyv9ZpoELeW2
djjQhUMDccSX3yUj5/fYG3nYfGrwR0NpOGpG96G+PMsJQ4ACAucSyet8hXEH1cgV
F/HrYd+AUTLO5Z8Td1PJZG0efnBVD8N3VxJXYxPC78iIYJOaXy35PiT69SPMLW5N
GBy916HjYQg1k+WIHSPy8P0KdWFCqpBGgjWUOzNefN0ZttB/mJZdwkvNFiEJIA74
4P07y8FrtTKnMbx9VrvQCwVeTS1AunAfJv+XfedSR2j0GU5+rbKcLeXNQokNPyPT
iFx67Pmx/66ncWGcXffra1bGkZzK64PcNQwzPMLU4y26nKDfXcmCUv1aVq58/QxA
eX2A5m03NVnZdRtjmUnujNbtftPgSZwYdVkscYb+3pa4rIW5oLwOyGhCoVvDN2kg
zZKOIBsFW2kuRnzy33BVI9ILoO1Rmj4lBq9quswWFjX3Aa6/m3fPjA6AikAto/EV
nLlJa5Ey1FX4Q24y7Ay9NizqJVnVbdoxHdPiIfcL7exTvbpjGLov09iQwXgcwjv5
yL4TdFGBW8yaJMJuU4ZLiecCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 291596912360135975299325825600427879308584
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-05 23:02:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-03 23:02:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'piwik.apps.a93.me'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 750057324138987795544643136456476687548373709072864221901354259092041824094059987234148022257810017759927637839634709358787622134425485225498939100712211855114401187418438794186330298824812696050085341936498132341369837721007880235643960038140027276580532873223741635549957080307544998220752793170601016165524540760526872868542601523632915040880678588006834352136758599939332968268507927238100485990358725568856322437744430721217569203380626402534478236276504332482028458186610311457139274514465099169640047081793070869279036691728599147441177255638203021016363153521402799779412994116250754385118539373918414434883163492731040571260163072013172494767514085844446553457721723428850718673698137673983093175040440250423716807763625025451544495490598690171234315292592466622398230766968488604854088290400337014717087852394156618079796911472027197089537665131362755940925721999890752393179660477422838103361665315720194415558409801225500976105259685572005575948369544370061470301403178218168792217680119963533210975299562160278931196230259111261316995225168590758194803709552460363130607299934296236987922508848739553146798427534390442127497614469854006320349081091906076145552095649412172503154778796944594723182869661017228983979968999
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b5fbc8a431341e58132715e3d9de62e44476a806
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'piwik.apps.a93.me'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001650c8a8cf8000004030046304402204d6a63af3e8f96563769c5adb02f0106b80d28e859b821a3b7705059a16705d102203201c1c4d9d3a31e9cf00cf0dea9dfc30f138179d078364232caaf5f35660835007500db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf64000001650c8a8edb000004030046304402203d0b651222ff1064c158e812c27fe9e8ece7cc9f3a139291a0b4099a517743420220276eebd2fa2c756a16b0bdc303f811cf9eeaf201239cade0c8ee975afaa73882
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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