www.graid.io

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:a1:c8:c9:70:85:65:68:dc:65:09:8f:5b:49:71:60:21:22 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.graid.io

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a1:c8:c9:70:85:65:68:dc:65:09:8f:5b:49:71:60:21:22
Serial Number (int): 316389210402575987210854982753745387921698
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:69:a4:96:4d:f0:a3:d6:2c:f2:93:b1:01:d1:de:30:bc:a6:db:29
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ef:b5:0c:33:dd:e2:3b:57:7c:0b:88:48:be:13:42:8f:55:a1:3f:e6
Fingerprint (sha256): 49:5e:b0:03:7b:59:0c:15:d4:4e:73:88:7a:20:e4:9e:4a:f3:6b:7b:9b:59:24:10:5c:49:9d:4b:61:cd:c5:85

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.graid.io

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.graid.io

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.graid.io

Other certificates including the domain name graid.io

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.graid.io in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEApDratTIbliOTbQt+pCFT
w2iqkk9CyDPSnH6zQ9unOpnkCDcM72ZRCUqOecj4mogwE2oAIHS8BaGGCVjpm3He
scp6EKNf3J9mOSgxV739vh2E37lnhABhCA9gbsahKW61qeVMge/w2xQZ/2OSd8rN
2WM+8J/7zzzB0qP1k78Jot4B9JwQwFYxTG0rie2JcGXro4hZ0Ap2K98FNH4eP4Rw
F7d7gyYEpUlynNHF+v41tRrkfo3YWptFxk5S7b81NY/OKINnEFpQ19DYOWYOhrcZ
VAIQ6jzLjxMmZ4YCzR8ZO1ScA4nkXsokLklkJkybbtjCiG1lQoJlhLlGoDjMTlsX
m3XuUjlWRm5tzXLCdplBk/rJbesBXpcRgP6BD/JwZvrUjyCEh2MNPgBpzAB66j/L
PcksbKcXE2TBmGlFG9yLRt98Mpjgt1LZPEZlZCIsIkXLTim4XqRjpXxhfUieX+1Y
RzZRCutkEXM4S2Xp6T5tlKZ7juLcaofVItQ0qhoAj1ZOMCNIA8JpdbJPCDU7hHg5
6VGLb266WZbAbckPQYpyUNIRL+0RzcVt94j17LcsvqmWmHZkLDdpkO7D6Jlm28Vd
KhbkA6weln5xCK98Sj6AkAwGafDohPNFvob5c3w2wk1OwbxRUcBXyKJ6S/9YEJr7
k0THbgN6bshjwmh01N68HGcCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 316389210402575987210854982753745387921698
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-03 00:36:26 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-02 00:36:26 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.graid.io'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 669999536168421333959258521533168980791160986153471484773688243889018155210439420168273371680436201392822485575401291741042993051253695247079451897288235639647724437376613213159610369776409282624650372520859376976997913656532143797359768823483305043725025756078473777544201400906056153773451138200160591090233083038405802713321392173864878815074826088813354120241661228168408177722171957128222871435972843513983380583527347327742318666165092042384515761906607680939363890023286681479577788729790005219073291880635783118813922840311999215114147818713729134470630669708446197519807512344372533196996130959897293347105837780444371191091437565602110331059383514326200157901847680968121385923038828186318992978821665122483332227952996975351089366085693655119860215292486407548262035335383250881659415729107897461457994109246426123516364149556419451617153197500970904611470828846719928461759445473694634157451134600889609714624427962220985883712957301932742362499068610286757724614479889494904137565525555614563383209225430339159563898401757708301569382684996285624763874271187061891491334962684397993827741320225220788462530271405472203652070433061895273145516942632924347543645127437891733348570603536689069261716725740268305444966767719
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f69a4964df0a3d62cf293b101d1de30bca6db29
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.graid.io'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f20077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d913000001713daea0630000040300483046022100facf676b9a60d4c31880f7dc3c9c3fadc0fd91884b8afe634e2020d744899c050221008c0f4604b21786af093615205ce7965fc1a6eaa46370b25942533db4d7dc9a4e007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e000001713daea2380000040300483046022100b9b382686659724ed8b4dd577ad500639bc4f866936ca1220e4a75796dfbbbf1022100a9f9d4c2fd0c200e6da6b827179341817fbaabc92e092c078bb19fffd94f5648
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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