www.memoryball.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:a1:c7:15:3d:88:4d:7b:17:90:1e:27:2a:b6:06:e7:db:29 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.memoryball.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:a1:c7:15:3d:88:4d:7b:17:90:1e:27:2a:b6:06:e7:db:29Serial Number (int): 316386945526973055127159901997638506502953
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: e7:2d:d9:1c:90:3a:66:10:8a:19:ff:58:50:48:dc:b3:5e:af:2d:a4
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 35:a4:46:46:67:a8:e3:77:f4:df:17:76:32:69:39:d2:8c:db:89:29
Fingerprint (sha256): 54:90:ab:94:37:1d:58:b8:dc:34:49:6a:f9:c8:71:e6:5f:5f:d4:f3:9e:9f:24:85:72:b9:3b:16:af:89:95:85
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate www.memoryball.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.memoryball.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.memoryball.com
Other certificates including the domain name memoryball.com
(limited to 100 certificates)
www.webdesignbhutan.com
www.driesen.com
memoryball.com
medicaloxygentank.com
theopiumdenkitchen.com
mrsweedo.com
www.memoryball.com
thermoblaze.com
www.webdesignbhutan.com
makekanyegreatagain.com
golosissimo.com
www.sostobac.com
www.valleyfitnesscenter.com
www.medical-intuitive.com
memoryball.com
www.fidelrueda.com
elysiumgates.world
islingtonhandyman.com
conservativemixedgirl.com
www.driesen.com
memoryball.com
medicaloxygentank.com
theopiumdenkitchen.com
mrsweedo.com
www.memoryball.com
thermoblaze.com
www.webdesignbhutan.com
makekanyegreatagain.com
golosissimo.com
www.sostobac.com
www.valleyfitnesscenter.com
www.medical-intuitive.com
memoryball.com
www.fidelrueda.com
elysiumgates.world
islingtonhandyman.com
conservativemixedgirl.com
Certificate
The complete raw certificate details for www.memoryball.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgISA6HHFT2ITXsXkB4nKrYG59spMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAyMjcxNDU5MTJaFw0y MDA1MjcxNDU5MTJaMB0xGzAZBgNVBAMTEnd3dy5tZW1vcnliYWxsLmNvbTCCAiIw DQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAL/2vijrVUcJmVkk5s9CTaWdFjov i1uYjB0sFaECpDaveCNKkHUzT0mhjSCZLTge/iPbGnqxcManco91jyPNECBSRJm5 fCERYjmviju0jpq8ZIA0b3BHZatblWSVwZJdDI98URxjWwndO+xMDiuZUlHcUf7O QmoZ6WXjdtUp5matNmAmVSMjvCMQul0LEG39hVxphPd9VoHjPdwYogShsuzUcfUm RxAgbU0PFnBcamx1KeTnVlSInS1aBiNyDEcQE98ptLgs6pCS8MJdef6XVkvUnPcG uZdRPgsZgXgpi++4Mh2QVSAAMtrNU9nTn0CCIrv8pKuvdNuh9udnEdpG0L0k+pkX y0glVvJVhLv30zX4KAI/gP73yGgKBokIc40qtA3j672kCqZ5j1KsKbq1/kBmJC7+ ry0VnPyORXz4ppXG8J72WV4NUxQhpwn8b09G7Z+xrRT8lzJfJFxmvOSfmAzMQmFe 1IIPAf39CtTNlellvgEoPEPrHZCsmz0QmQU6HkmXfIMBBdMqtoKAdM/cwSCmBiCE U/zOiZkTqZZaJaKQvh2k+M3m7+zevcOvZryFNt/ZiCd2+xiEuGehZBcvcBQABNcf BPnWiFsfGf6d4egw3zTukQwLTc2KDtVj0QniABvmjhEQ6MOo7y5zG0efqLfSRRQZ n5w8PnsqeC7UB+vNAgMBAAGjggJnMIICYzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0l BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYE FOct2RyQOmYQihn/WFBI3LNery2kMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZF Ze/zqOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3Au aW50LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQu aW50LXgzLmxldHNlbmNyeXB0Lm9yZy8wHQYDVR0RBBYwFIISd3d3Lm1lbW9yeWJh bGwuY29tMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYI KwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBAYKKwYBBAHW eQIEAgSB9QSB8gDwAHYA8JWkWfIA0YJAEC0vk4iOrUv+HUfjmeHQNKawqKqOsnMA AAFwh1+TGgAABAMARzBFAiEA4QiILceWaAe3mt1HgQdU5CQE+AZX9OOx7c+Mdr76 tS0CIFPYLvbFkKeY+aP7cdeWO34f9lriFv0JzT/1coTaWn2OAHYAB7dcG+V9aP/x sMYdIxXHuuZXfFeUt2ruvGE6GmnTohwAAAFwh1+TOwAABAMARzBFAiEAnqpQCdUE J/s/DgrcD16F91hAz09PuJWnVLqpSvoYE5UCID42ZKJTBJSQDoBYIb+Rnkn+JC9c CeQRkw1FmEb7Ci3QMA0GCSqGSIb3DQEBCwUAA4IBAQAsQOU3I8rllqLE4UQXmv2r tEXdO4xmLtezSb3eJcI4CbzQGAe3J8rEvqL6eWuv+Ss6olSzOk2ZI7R7kYCRY/Ki Vd+ehqZG7Jm6iwLFxSi1A9Ga97LI00Q+P1YEP06KKVHuBWLaMLj9mQAlID5iwHvD 1w1ekBTYVY1VbVBJD7lhrR00y6ajooO1pchgJ/8WRyBT5pMDWy9wSCXNrbpjaWZ4 NsTX/JwZBV1E7xY8pQ88AL/0P+jl2ITXjmzSNz4+QqIPYtVdzY2pO9EXUOpwj8WM Ye9WDJPqTufD0IMcE8KLiUny/0m+crqFZ/Bt94VDKqbJ924xz/TyFIEmmW+v2p1n -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAv/a+KOtVRwmZWSTmz0JN pZ0WOi+LW5iMHSwVoQKkNq94I0qQdTNPSaGNIJktOB7+I9saerFwxqdyj3WPI80Q IFJEmbl8IRFiOa+KO7SOmrxkgDRvcEdlq1uVZJXBkl0Mj3xRHGNbCd077EwOK5lS UdxR/s5CahnpZeN21SnmZq02YCZVIyO8IxC6XQsQbf2FXGmE931WgeM93BiiBKGy 7NRx9SZHECBtTQ8WcFxqbHUp5OdWVIidLVoGI3IMRxAT3ym0uCzqkJLwwl15/pdW S9Sc9wa5l1E+CxmBeCmL77gyHZBVIAAy2s1T2dOfQIIiu/ykq69026H252cR2kbQ vST6mRfLSCVW8lWEu/fTNfgoAj+A/vfIaAoGiQhzjSq0DePrvaQKpnmPUqwpurX+ QGYkLv6vLRWc/I5FfPimlcbwnvZZXg1TFCGnCfxvT0btn7GtFPyXMl8kXGa85J+Y DMxCYV7Ugg8B/f0K1M2V6WW+ASg8Q+sdkKybPRCZBToeSZd8gwEF0yq2goB0z9zB IKYGIIRT/M6JmROpllolopC+HaT4zebv7N69w69mvIU239mIJ3b7GIS4Z6FkFy9w FAAE1x8E+daIWx8Z/p3h6DDfNO6RDAtNzYoO1WPRCeIAG+aOERDow6jvLnMbR5+o t9JFFBmfnDw+eyp4LtQH680CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 316386945526973055127159901997638506502953 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-27 14:59:12 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-27 14:59:12 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.memoryball.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 783144137494995683997896091562308168339562355721769527923610774788834101710948161617235474406321676392385927810075342556629418331466977904711662678695837943770315779114072434427418943010145346292529113644458716829620125832173835339781282529045632403905394993372965072677570493323553234614394482636368710107089036923209486419156498873327983294692500797754179715013648838629752637440000278193019401470625963759286440120825866979612253722614792159076028940232913117888260362894632450008079559415332668249161470545270131213754163663914466131564595809825602439520734455578422280283070420156328057406313729619586049136318419391946219864152212060841856077479521407869304934391592457782356053532346566054225172237691992790461680615841341063182162260544968771739735151274641526363303728560341434494410465694109207682997985095317007588017289467130977461592078264808426856269881398655100424294390046731606153585740088208113722036541360257923488394795622075140304796687622135928221064903944654260971090769999827269822275564749571882765263955221703895373458235784895792497979857404072055339334518756846835745601333178336903372560399835080408276348252994550841913784909106833096341356211862774841310578573663528002637904983367242514403984130173901 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) e72dd91c903a66108a19ff585048dcb35eaf2da4 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.memoryball.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb27300000170875f931a0000040300473045022100e108882dc7966807b79add47810754e42404f80657f4e3b1edcf8c76befab52d022053d82ef6c590a798f9a3fb71d7963b7e1ff65ae216fd09cd3ff57284da5a7d8e00760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c00000170875f933b00000403004730450221009eaa5009d50427fb3f0e0adc0f5e85f75840cf4f4fb895a754baa94afa18139502203e3664a2530494900e805821bf919e49fe242f5c09e411930d459846fb0a2dd0 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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