www.bodyage.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:c7:de:9c:f4:dd:2a:26:f1:77:3c:82:ff:f5:8a:1c:f9:28 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.bodyage.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c7:de:9c:f4:dd:2a:26:f1:77:3c:82:ff:f5:8a:1c:f9:28
Serial Number (int): 329348952392352089582521430456602292189480
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 49:d4:e2:27:45:d0:b9:ac:fb:10:b9:8f:3d:9b:8b:3d:d9:26:35:13
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 65:86:93:ea:24:32:fd:ca:f1:5e:d1:8f:77:a4:f7:92:e7:b2:9a:9a
Fingerprint (sha256): 50:78:6b:19:2e:4a:03:4a:21:aa:c2:8a:95:35:31:d4:17:9c:46:1b:e4:bb:df:84:69:99:7c:45:08:d9:b1:02

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.bodyage.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.bodyage.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.bodyage.org

Other certificates including the domain name bodyage.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.bodyage.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 329348952392352089582521430456602292189480
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-09 07:32:29 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-08 07:32:29 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.bodyage.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 1000619646163334454682965154756165300942859819361293337268596581165375841321289023825382799454921686717660237126532602529944601777057179497709434151632836447358655998135938772963666065051838346256245874950285441223173161095762777051816879181566718857720183946765533360016775794110705691087523735904695476708922044723768839248568945584203817097936703860057035614555581832270004484510586179378232468833896994630573572876866709625819835081066113756635396100427138053548252125285969444600487454684574641868135821902501282266834113708116274475487842876006627182530108468053748926040547367685032985331369384950554680407774624024091769775285293529531380118870416206544541296119656734942194607416203457434446762885936179066686042836212956125249835571988850929348720509657004573959828197967758731924363764133468947677526078164113002777112879679004305120006757478125308715650031012254428716483486261786823272478176092172729685568433472619162054777247241733449555175774435815104724129185290031877699826965984787061446742796389966436549925502813118769839477005314728970558173502728694552141230777908004417329955844344181615332631033541124617071117476657069712357773965969569353641051608099339658480456143485732799836499798170858611174569398802377
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							49d4e22745d0b9acfb10b98f3d9b8b3dd9263513
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bodyage.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016ee9c9d8c40000040300473045022100ab9f33abf006fbeea4686e7fb7ac56fc5e57f542922514e517840b21e12e7c7502204b0af98f9829c7d47aa81846daa973868826ffb492c48004c26160bd9c195631007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016ee9c9d8c30000040300473045022004eaca590bf3911b512808cba35dd2c57d2771bb7d190040df6087af5d2b92c4022100dbba039a60676dca3563f2d085154b2816cca7d9a8127922ffcd3a3ebf33107f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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