dynablack.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:d8:b9:ff:a2:d2:69:bc:b5:e8:e3:e9:d2:2f:4f:0f:70:da was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=dynablack.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d8:b9:ff:a2:d2:69:bc:b5:e8:e3:e9:d2:2f:4f:0f:70:da
Serial Number (int): 335085083567543577848188942565298834206938
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: bc:4b:bf:27:04:e1:51:42:ba:73:3c:73:7a:ad:36:25:26:04:27:82
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): b9:58:8c:c6:1a:8e:bb:d4:db:f1:34:cb:a4:ac:f3:8c:b5:14:e2:41
Fingerprint (sha256): 52:c4:0f:bd:ba:87:f7:3d:0d:50:30:a7:d4:95:09:82:39:cd:62:71:74:b0:d9:8e:5b:86:12:e4:55:a4:dc:d6

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate dynablack.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dynablack.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dynablack.com

Other certificates including the domain name dynablack.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for dynablack.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAxf6enAscIqbhumXPNyDO
38wDHw29zXlRH4F7ElmCccNu5t2X4ivF6p1vtc/cOXrJvG+jCUK5gCk8v+zq7WPB
qU99UwokNi9AB/3VlXhvg2eJh+iNTPcgmmtn6bhDCbuqsbNuEbzbzeEUfEQUc41N
Qz5Sv64TTl46MnJ486ilvTMRCpEXNKTaaEyOjUeBWb8nFvnYIwYQkP5a67aKJ2SZ
BJtpXQO0yjEYnmifLZ0I+Nw10G5LN1je45ATm/TnkBoOGIX8iLDa84NRuUOS3kZI
drQTYaSOjilaIEenwEj4cjIKi/lG0UgS/1w0ykZWUQkQgsrGBGY6chcO7mX0L8bY
FtxnJcdfP04aS1q5JzSx/POLODc/HA2OwpRf0m7XJaqfs5mKG22Oy342owRwQwVm
+D2AVUlQdknGigQ4eTuvhSGe9jx2iiZG9inPNmmH9H67SYmz7AI53PXU10VWGdLx
TKvjoE8JMFdcNL3LCx/AYxTbmUn0ZSyQd1eha+VL53/O9zsSE5T7dCkfC0a9ipmi
xLrNTRADKkuo/2XziVkvW7/nTOQHWBBX/cwNtOjGCzwabzueYBoKzA5NKtsBB6Cu
hG5IfJSwkHWh2DcRdcKZFCZa1uPD48B21l1ccG5S/+JCpP6xUeSNm4/11PU3BtO2
qlUhwIohE4R9HTf4LhFKmWUCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 335085083567543577848188942565298834206938
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-17 22:14:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-17 22:14:30 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dynablack.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 807747526760780263524979613821761316196976815970224580130536072565119748226067654045465662156683592807815662069479358067613833726220677305065794411940052396638627983199024616833115739199402056604168352331538717097125553374621393893814601858013655850425223224748258880857268044324614907650625447912108074704187557759233381557751267596939069432754684686656483216963405683403904751332878810368266725098707447097222620908184697199176885150084908357213404904885105820012356203726287407940188730779507061697984592579669426529578112511823005095347365492109976801526110926036218364908118203165569407152770231271445263239203720942388289530160309266027584087140745722953146631416036701830644447310268721384562751613730372453118353100108634149880794555239624420005818866615078505396778152607139333346793509446345848068253430081344387241394868072284289545304742821009886394105453472568010925988244685391678861140896373232167829931584129867489547260077469256628077281033462151894409829479410011803306482329326352700484053168573453844091875404523886868025865506640706573643859186430927856713205639392196466200150146622990181055788723189884857731075581003981293739703174378756570273922076139488675586178458216947793881953338492321261669296984725861
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bc4bbf2704e15142ba733c737aad362526042782
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dynablack.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075005ea773f9df56c0e7b536487dd049e0327a919a0c84a11212841875968171455800000170556e81fa0000040300463044022004909f8f0c38e0529660573d466a1e463ce576aa16cd9a1c5f363043c3690e920220095461efbd65549fa543bfc9e16d70575da22b4320597eb1f5e8d0e57044679f007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000170556e81fe000004030047304502200fa1849c6669e6a180a1064f45ae748dac63762864d2df974b3e390dc9d93110022100bd2c240d9fcb76c66cb9d8ac4efbf8d3c48578c2ff2d7b8f5926bdb2b3947843
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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