monittor.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:89:2c:53:32:b6:aa:d3:54:36:6a:d5:16:d2:45:9c:a6:6c was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=monittor.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:89:2c:53:32:b6:aa:d3:54:36:6a:d5:16:d2:45:9c:a6:6c
Serial Number (int): 308014460084495977816334760080685471147628
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 5c:cf:2c:03:f8:51:3c:22:2f:89:2b:c2:50:db:7b:b2:8f:8e:95:b0
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): bb:c8:49:c1:32:d1:2d:3c:8e:a1:5b:e0:d6:07:53:18:63:55:29:c8
Fingerprint (sha256): 4c:84:63:bc:14:40:70:1a:23:82:93:4e:fc:42:a9:ac:72:ca:1e:c1:36:66:ff:c2:03:22:5e:eb:86:15:70:ae

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate monittor.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for monittor.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

monittor.com
www.monittor.com

Other certificates including the domain name monittor.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for monittor.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 308014460084495977816334760080685471147628
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-21 15:50:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-20 15:50:55 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'monittor.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 849338816418742309735484201324151259433022567586487221765123167454314542988554666442161383653441123045251318514905658473661843960167547586644961864674796142057934764235026825711044582999488177195842590320418355899927358082438360196547826100268321696176430843189857318914263967709590596071124645800784751624981501343856686576404304020845093751070935236081658205192359200816306888557149854879838190656593694872956184971446946496291732467481632870258983714121854853185512390065311605360239036427436496717125990097465667752578798725517259039729837692406704157968118048378376989861555540283478356576048547075257741003784401905910255161414966595547127640071148526836947830983671741776318172312039703111900393942899577343735157139147737453761853230711952974674224160374210941862058756923418936439446357145606942312364483273496853819448914872641510829454693961863077696182135958892282724394334330570387710155297997505451572965162474959662115509924128507264096813323133304992536116712837098978635449088104197569423866132354719598340832338427187466137929343389230575639934036221884154820482045868982456057593179782033043983747064894524367332252089443372769995371592050215543280845490200667082682508856453667338383080530390190495846699923268707
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5ccf2c03f8513c222f892bc250db7bb28f8e95b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monittor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.monittor.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016d54bbc7a100000403004730450221009ebd4f7ffa4ea51fc5a4ff0befa03b05a68b772fd7298ef1c2161e29ec67492402201f03f0b4f5fb161ad0e2eb43d6cbbacc7d2dfc4407b3b8d110270615a5ad335300770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016d54bbc7af0000040300483046022100dbc072559fe2b8b19c8a9f80f5ea59e6d531ea63bd65db42a9f3f0b7829db418022100a44a4e844670ce9677ff28fb5f362385d281d88f9848f5eb05bc7535fdd5238e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		009943485c9b11f4b3635546279102259f7a4def6069b890c5727690a1ef4c7a127c214c583ffa95a930cd7b568dce2d8aecb3b330e6a34f616877704e7f80dc861e5ff33238d7954fadeaacc09dcd27509b2492c5839d22faaa97696c22d8234c0c59fc0efbedbbd0ac120ec6d179a379ec235270992e22389651dbd7dd1f7c8fdbf30a25a5b29c45d92294e57a9bd7e722e969bbafe7ab7cf9b3e2f342e9c1cfda9da3fa2d6dcfacc78e249b521022c28c57c55fd5bbf13b2ac1c94bad84bc1c5a44ec49da831584f92d4c4f45caf9aa83bf023e1b78e80c2c0ea31de3440f39c2381f7b2d87df8f07f4b925bac5ff5ba554b1e8f14720a9b7c693be197803c0