chriswritesthings.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:68:57:f6:39:e9:38:c9:e7:34:67:7b:98:e4:43:07:95:77 was issued on by Let's Encrypt.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=chriswritesthings.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:68:57:f6:39:e9:38:c9:e7:34:67:7b:98:e4:43:07:95:77
Serial Number (int): 296843145270293911909043795041880153494903
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 13:a8:f3:10:97:75:eb:e6:e4:23:cd:dc:3d:d2:ab:8d:94:cd:9e:e4
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 06:0a:98:66:ac:f7:ca:c5:43:d0:c5:19:bc:7b:c6:e2:5e:40:45:1c
Fingerprint (sha256): 4f:7f:21:58:02:38:62:9f:06:14:e0:bd:17:40:28:34:d1:37:26:45:75:ba:43:16:1e:92:f0:2e:d5:45:32:de

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate chriswritesthings.com

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for chriswritesthings.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

chriswritesthings.com
chriswritesthings.helpfulhintsforliving.com
mail.chriswritesthings.com
www.chriswritesthings.com
www.chriswritesthings.helpfulhintsforliving.com

Other certificates including the domain name chriswritesthings.com

(limited to 100 certificates)
*.chriswritesthings.com
chriswritesthings.com
chriswritesthings.com
chriswritesthings.com
chriswritesthings.com
chriswritesthings.com
chriswritesthings.com
*.chriswritesthings.com
chriswritesthings.com
chriswritesthings.com
*.chriswritesthings.com
chriswritesthings.com
chriswritesthings.com

Certificate

The complete raw certificate details for chriswritesthings.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArP9+PP/d2fDub+DCRNwL
ljVQi4SBWivtD8SJvmURbRu4Qp140gLtv2NiFzUBRL1bbIzZUxibWG0Nftu0Iyru
6tPg3QXT94yZ+LQhroIzJMgNJAseJYf3FhiliAFo0eAD2PF0jiOKC59G53bupCdE
pX4ZkdBupWynSTR91zt2fXvF5JXjOyroRImLbYU1kPngqtjQ9qyAPK4BQA413w+x
p6OFhQoMeyPhrwQqP7eOQfcIJu5JXeZNG7U6R39+B09MwTT3n6SLdFdMdpJpL5N8
txo18ab7pzvCzunQNRD787m8eagbgIn8mN/OLFeHYZutsBFLrgRLrTZMzElKvTdm
EwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 296843145270293911909043795041880153494903
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-28 09:51:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-26 09:51:15 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'chriswritesthings.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21838976806435248734102993379955075185892855166180687053102810397539306438984729227652331124134568559697626690439954772808678686405421618196153761009887138420430576151033295721137782507859861383689863182570203762622683493950095091495503229512678204078072196471911278319440202227388546022018829387636649086432479644786611200761967802851764824628067912914949784596551291775875171446351874113342028055172552933667631214245331269598711694428184730492400660049743671247897010313182442299700970007007169492213120660545250971252851922802349152233854844589451937020748316336572712205248864444167142313473564075914042325558803
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							13a8f3109775ebe6e423cddc3dd2ab8d94cd9ee4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (175 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chriswritesthings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chriswritesthings.helpfulhintsforliving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.chriswritesthings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chriswritesthings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chriswritesthings.helpfulhintsforliving.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc5600000169c3ece3010000040300473045022100fa02e7c5d6b4e359a50fab87a809c19e477068b955125d8c4bbbef01f07d0de302201fe6a9ce59eadb4b9671186fe35b7356cc13586ea69e5f5e35211ad9037e1cdc00750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d00000169c3ece4f500000403004630440220628bbe2fc0f4d8f6f9dad7d8d7ae2ac0d9799e4aa07abc471ce1a78e2d220b7c02201913c0c0738c7bf471a4557615da4b01083870660a62b708681ceca6aaa202f8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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