www.arthritissuffering.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:68:53:96:89:7b:9d:3c:aa:bc:9e:e0:1a:ef:57:ea:8e:e8 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.arthritissuffering.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:68:53:96:89:7b:9d:3c:aa:bc:9e:e0:1a:ef:57:ea:8e:e8
Serial Number (int): 296837331511721110559564181052839269404392
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: f9:dc:06:80:33:97:7c:0f:c7:58:2a:55:8b:cd:88:4b:a4:1d:5d:a3
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 8b:ce:0c:0f:ee:43:20:bb:68:41:1f:c4:48:09:47:6f:0e:9a:42:80
Fingerprint (sha256): 52:cd:99:af:d7:7c:32:8e:4e:c1:d1:b1:b7:02:1a:cb:6b:0c:38:76:cc:b4:d0:92:0f:73:b9:94:30:d4:d5:87

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.arthritissuffering.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.arthritissuffering.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.arthritissuffering.com

Other certificates including the domain name arthritissuffering.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.arthritissuffering.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGajCCBVKgAwIBAgISA2hTlol7nTyqvJ7gGu9X6o7oMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTExMjQyMDI5MDZaFw0y
MDAyMjIyMDI5MDZaMCUxIzAhBgNVBAMTGnd3dy5hcnRocml0aXNzdWZmZXJpbmcu
Y29tMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAzUkCoMj1sADKoZGz
V1Fvckq/JG5grF8FoRyqcWmRO5x8VmIX8aKXi80kawixRZ+AiJQYTw4J9wda6/rv
I3yYcKSQYxQ3fqkw6UHgHBCJtxt44XQy38p7M49kRED7FolO6AAJ4uMaROUs+R53
zaKI3r90TdbwFAH0W67k5qTtwk7EWOatAY1KkXAuf3ALUUj1B9SqQo2f8GVFEL/3
lrnU+OtwveUfzdfUl4DjJsUIGNeHx3MWXerks1kJ6+9E4PQmz9j2aY6DdMERFciW
69VyFSHtsTHb6UIrE5w4fk9LjJ6wpnwd6Hsl4/aH424Bq8J8oDAzac5A/Tjxpv/n
mUyyOZWMDYLOxVJnoDyK5edP3klJqKZHTDUxQrfs/kFojazqqfj6wnDZQnf8yhjd
M1jU72ITyiqd2q5zMUkTyOLCdHSttwk+xc4rh/SvCZWkJ4ws2865OZfaJJYGdd8v
r5sARn9WDMZPXQefGHaU6jqCyQL+0L/i1ewwewpxQI1jkIdgXpchjYII2+ELHpGc
7tAxcKTZnR+PKPqOVado8ErelGdSYQKzxIlnOoVbUqyw9gbP3wB6RTDB3OaKsk7T
c8U9i0DExkPnRLxQ0o9zWrCXS+TKnlv7mfCYDa1FAoaX6ENgbjyuI1QrdHRANiT9
BRrWYbcS8GQ9OcZEixhuOMnGRSMCAwEAAaOCAm0wggJpMA4GA1UdDwEB/wQEAwIF
oDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAd
BgNVHQ4EFgQU+dwGgDOXfA/HWCpVi82IS6QdXaMwHwYDVR0jBBgwFoAUqEpqYwR9
3brm0Tm3pkVl7/Oo7KEwbwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRw
Oi8vb2NzcC5pbnQteDMubGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRw
Oi8vY2VydC5pbnQteDMubGV0c2VuY3J5cHQub3JnLzAlBgNVHREEHjAcghp3d3cu
YXJ0aHJpdGlzc3VmZmVyaW5nLmNvbTBMBgNVHSAERTBDMAgGBmeBDAECATA3Bgsr
BgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0
Lm9yZzCCAQIGCisGAQQB1nkCBAIEgfMEgfAA7gB1AF6nc/nfVsDntTZIfdBJ4DJ6
kZoMhKESEoQYdZaBcUVYAAABbp9Rdr8AAAQDAEYwRAIgKay5ADb13938hml0syWx
v40Pt/8gqLb8EMvRzWmYsBACIC8L9yMq9sAbSuVVw8MKv44E/pJkxsfrwMnUhsaG
jDshAHUAsh4FzIuizYogTodm+Su5iiUgZ2va+nDnsklTLe+LkF4AAAFun1F2twAA
BAMARjBEAiB9cT8bgkzCM2tVjcoFVxSl1iiZ7FnlLgQsVpzzPkmnCwIgcVop1w0H
pN5ZSSCqDIYeC8h7ZrfmRtrrvSnEQl2/rU0wDQYJKoZIhvcNAQELBQADggEBACgA
knbhXhULpQ3OwjEQPMbEIEwubHl0jJeI28zlHjiRdMqsgmNVBUP2mphK7S5ksrT1
LLx37ejeuHp+K0DgJun5poOF02npLVZMvUyTw+xd5eDffRmieNE+b7v1itZxed1B
z0W9ERKn/Ctc+k0ZzY5u47QlR5ee/0qayUvcQq8dCCeMWA/sP7eHcdT6N/z3JxwT
7/iGjdYaK+TDp8B3uuXJaZ9t1RHbt167hLlWJ+pv+Nl6ZFtg5UNxY9IdgXLrPwf1
/0EVPkfZsw2yb3Y1o4NXeFQJQkFrC+Y3dozDQ/HOV6A/V+GBST2pu36uKf8cpC7C
LIXYNGMumAyzoGeVdlE=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 296837331511721110559564181052839269404392
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-24 20:29:06 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-22 20:29:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.arthritissuffering.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 837490533546156473974280047526164464336298043038220346112855311124355965056860555524291219081874849818056603819475715256541360735123456919014362150027500446274461036135641403176205881211942640965549141438890980209328281539896661061527464031678879596742294955882550111062566087285582782057343896458070113061498914443348470074319781380909268494062277306673183815700130369583775878657374658243275444626277922051962547483750613154572783953357803313791604244900005597234158338118086725364278116642902462366784727302246078557860675731891581230608586421485337075988926760389545415606605407050796271856368452150187957784158096298512511871183457996803502466649037900495615834412818296191784114077583664508807705210153189350471558625231602728866691084801049843561283420434963071318162851327686916205956794625953399163666782275988446807789589061637616646462955559603966438436684113209755790067477234850700561206219219664511416486196644761941877662272615144082029402058313461674992697964563125117889358135483711324549970756746164388484177497683089792655827897324019570518630993809908852033757429567029176798808749968692736444376559684179832576982038773754081379950232263480193199429207769547118572728432836375259405707215608686436327932274558243
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f9dc068033977c0fc7582a558bcd884ba41d5da3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arthritissuffering.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee0075005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016e9f5176bf0000040300463044022029acb90036f5dfddfc866974b325b1bf8d0fb7ff20a8b6fc10cbd1cd6998b01002202f0bf7232af6c01b4ae555c3c30abf8e04fe9264c6c7ebc0c9d486c6868c3b21007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016e9f5176b7000004030046304402207d713f1b824cc2336b558dca055714a5d62899ec59e52e042c569cf33e49a70b0220715a29d70d07a4de594920aa0c861e0bc87b66b7e646daebbd29c4425dbfad4d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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