prodigalself.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:dc:65:4d:69:f3:0d:e5:8d:24:08:8e:a6:29:fb:a2:91:fc was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=prodigalself.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:dc:65:4d:69:f3:0d:e5:8d:24:08:8e:a6:29:fb:a2:91:fc
Serial Number (int): 336333632501229338276755164773731413430780
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 13:be:a6:58:67:c2:72:78:46:9f:f2:44:f5:04:77:aa:90:de:12:20
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 5b:e1:1d:b1:fa:a5:aa:be:40:f3:f6:97:be:6e:3a:1a:cd:0f:f0:72
Fingerprint (sha256): 4a:56:74:1d:d5:ef:41:4a:96:1c:a8:5b:fe:d1:36:f0:65:a3:55:3d:a0:17:1f:05:80:a0:ea:aa:8d:19:06:30

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate prodigalself.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for prodigalself.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

prodigalself.com

Other certificates including the domain name prodigalself.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for prodigalself.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAsqFUJOuVvN2YgC+ajRjg
kDxDJBfMA6K1JKmVf7Aa+RFov829MwE63Zj37wEasfCfvv2Sq66B3GMnddtefTnz
HXDbSTkq7nbpp7o+RDRRWQzdNEu4mofwOtU+ycD7HhVS5F8EfreQ65huXQQDt9N7
ilP0hwnKRyXxNUOqbQ4wM3/ZBDHRwZHqVo98D0wddAF3oc4zJwaRa8DMm3z+na4y
UNbVRfsz8Cd6Hpdk4ILk20EHeloYt+c37Tl+FU9GdLUjVUKnjuiI5VG8MiucFui0
NVfa4VDnlyE+/MuhiicAhFUEwFrAU4wnoBmdxMeMaDJvwRIfTUn1obhLwS1lbW3C
aiqxe64XZsC7K1UybyF7L/8dlEwn9qEDbjev6bKlJt1y83EGqNJmcs74T+3XWXrY
TCbNV7iT0rH1oP5tYhVrAgmsjXinHnhvD+7cb4BYHVt6jJ50uV46jq88FeDqnfnS
E6UxYaLabGE9bMaKfYnJdhsGfjx4S57VqALPNaFClPjMtusAx3MTGiqKzKySZZSQ
o2BVudzbouOYR6PAGXyN9lc7O/Er43uq29xenkTWRMv/LLIMvDnRwQz/4vvzWm58
uE89YLLCGq9sM0au9OTqmja1MATQ0TAfvnuOZYzmKzIXNthYG+DuULEIoZmAPNP4
vEJTJdwiLs5FXfxNIuygm3sCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 336333632501229338276755164773731413430780
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-03 08:28:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-02 08:28:19 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'prodigalself.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 728747595773452354017327132380082528784737755830521682220607107634760287672120656732139322915690091170421115105632697485793649739819349611268539752222448246389845753287785939363555187070698031181353104264902607363365643917267526571610881589835746194385685466604496094719076018775981578339405247052054924171053094701978305112059917606383902272132148719493012154659769000721190946452723968554890259602546885275388231707944070863468683515043990358969058299042539811383590999746529160301834041026577290387203093427534541668487000620987260892048406368988069190889614092083296168984322159567827633627046383626096807230220038078183622981902242301076856369434586350168017153810227813902061370764772951409740438863119689707718156370879029019772139091119687488150929829007104401409279343564781224753246575427407141183653944667787696366728877022021394002724223114526276615180869470264107381237980406759630269621757517549852123696409720306106778851825830592567605882286998994365972089967888546373336056129638867243436496157422387079936166669096957146872398345402585119082253692757297828724726769944280307855154581222405393126836764285815532582662988895406356751483903835303035327845388213899695627597751509591989390509621923412075522290599631739
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							13bea65867c27278469ff244f50477aa90de1220
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prodigalself.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016f6abbf16c0000040300483046022100b07ea22b484d8bb1e5c5d96edc06e24f87fa142cab96b31fdf165a7ba6c72585022100c481f1819a8b9815ea7599ada1709e9d59bc315dcabb31c8af7451e7023fcc7b0076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016f6abbf20e00000403004730450220206aa99f2bf96f295a7f1228379682930b12aab520444a4e9f854b88a3c0ee0e022100e32f9c860761c2cb8ae314a599d2f3553e2e6a7028adb28ea4ba6df546263de3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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