domhugs.org
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:ff:68:42:df:7e:a6:96:a7:91:6d:32:5d:96:1d:18:ea:08 was issued on by Let's Encrypt.
With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=domhugs.org
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:ff:68:42:df:7e:a6:96:a7:91:6d:32:5d:96:1d:18:ea:08Serial Number (int): 348247448296285989405378647886850778786312
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 43:43:10:91:b1:22:fa:22:9c:76:c8:d9:5e:e9:b5:a3:d8:6a:8d:c2
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 07:76:7d:9a:ff:41:09:df:bb:7a:d1:73:fd:3c:53:f8:0c:78:28:46
Fingerprint (sha256): 55:e6:40:07:e3:f0:be:8d:16:de:f4:c7:e7:cd:a2:66:c6:3b:39:e9:7e:90:04:0e:3a:1c:91:47:16:0d:65:65
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate domhugs.org
3
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for domhugs.org
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
domhugs.org
webmail.domhugs.org
www.domhugs.org
webmail.domhugs.org
www.domhugs.org
Other certificates including the domain name domhugs.org
(limited to 100 certificates)
domhugs.org
domhugs.org
8bitaudio.com.adeenah.ca
domhugs.org
tvtwo.co.za
hydratight.ca
agnusdeikofc.org
comicbook.bible
domhugs.org
domhugs.org
domhugs.org
greatgolfshots.com.domhugs.org
domhugs.org
smokymountainbiblechurch.org
domhugs.org
domhugs.org
kc.one.bible
loveall.life
domhugs.org
smokymountainbiblechurch.org
domhugs.org
erin-gee.org
domhugs.org
34755625397.ca
domhugs.org
der-dritte-weg.org
domhugs.org
domhugs.org
domhugs.org
domhugs.org
8bitaudio.com.adeenah.ca
domhugs.org
tvtwo.co.za
hydratight.ca
agnusdeikofc.org
comicbook.bible
domhugs.org
domhugs.org
domhugs.org
greatgolfshots.com.domhugs.org
domhugs.org
smokymountainbiblechurch.org
domhugs.org
domhugs.org
kc.one.bible
loveall.life
domhugs.org
smokymountainbiblechurch.org
domhugs.org
erin-gee.org
domhugs.org
34755625397.ca
domhugs.org
der-dritte-weg.org
domhugs.org
domhugs.org
domhugs.org
Certificate
The complete raw certificate details for domhugs.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFdTCCBF2gAwIBAgISA/9oQt9+ppankW0yXZYdGOoIMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA5MDQxODE5MjBaFw0x OTEyMDMxODE5MjBaMBYxFDASBgNVBAMTC2RvbWh1Z3Mub3JnMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0JFJBCW/1uHz6YEIZnexBTbhqR1qQs+uaKyJ 7auLHWDyKotEjuImOBzuYqtI1HkWyWjSCWPc2T08xMKHUspdY/gu2DhAXsbX9A13 doHRTK4DRYm4R6VRCfWq/IPgSBsS3G1D22A5Za+2n77tRHyc381vPdmcUdoBNUb0 IBpqH7lo/wHa6bKcW+nbPeQLJ2aqhVmggPb20iAv8zTothDwSxTZ4oeuwSzPFC3m XKF9Y/CgNEPMs/u2Cofp3gEhfwao79T3d0jbN8xyq1TG5ypItkJNB2fFIpbFII0H IilKk7DluzitNpMFW0UOP9lkT9VWihv6aV05/4QJgLiTtsA+NQIDAQABo4IChzCC AoMwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcD AjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBRDQxCRsSL6Ipx2yNle6bWj2GqNwjAf BgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBvBggrBgEFBQcBAQRjMGEw LgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5sZXRzZW5jcnlwdC5vcmcw LwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5sZXRzZW5jcnlwdC5vcmcv MDwGA1UdEQQ1MDOCC2RvbWh1Z3Mub3JnghN3ZWJtYWlsLmRvbWh1Z3Mub3Jngg93 d3cuZG9taHVncy5vcmcwTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMB AQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEF BgorBgEEAdZ5AgQCBIH2BIHzAPEAdwDiaUuuJujpQAnohhu2O4PUPuf+dIj7pI8o kwGd3fHb/gAAAWz9t4tkAAAEAwBIMEYCIQDbuwruNVNlV0bxvbtVc4olIZtsWMw0 Uo69FfqJkAMUIAIhAOl4nexjUwxkrAvbBEnb1A8tWK09muaztPaqJ+f33GoyAHYA KTxRllTIOWW6qlD8WAfUt2+/WHopctykwwz05UVH9HgAAAFs/beLiAAABAMARzBF AiBrJ9XW8RE4Nx7EzmqhgoRJjFQzXS+hmR+/vOQNXzmU2QIhAJmVBGDBLT17auQ3 bK85+AQRNsIRjquyVs7z8H0KNH5pMA0GCSqGSIb3DQEBCwUAA4IBAQAUcMLlWu3R xctlVDiSN4+HG1wl6u17KhuHa29LE6fl9f6orXoz66GA600nbH53VldRddZ/eKa2 mQYfeEHs5GNJk7i56D4qTSPkdfuFX5fO3K2XSEn1ne/HkM3l0nWCEI9E6+Sxv0cr 40tdPZBS9LrEkXri8clPteza6czRiY3pQOjrw0BKabi0tggQGcJBrL/uSRyaxue9 8k9leIchZ1i6c64F4SZ0fUcxSaFIvcQx6+GwtBHh/2ab0LI6hkULe+iFQ6PB30mX 8F/w4NKROuNwPThqZoY3sx9QeFcR4l2U7yQILfjHAQcOuM6ZqTke9MMP5Z0szIVI nLHlDYJMJRDX -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0JFJBCW/1uHz6YEIZnex BTbhqR1qQs+uaKyJ7auLHWDyKotEjuImOBzuYqtI1HkWyWjSCWPc2T08xMKHUspd Y/gu2DhAXsbX9A13doHRTK4DRYm4R6VRCfWq/IPgSBsS3G1D22A5Za+2n77tRHyc 381vPdmcUdoBNUb0IBpqH7lo/wHa6bKcW+nbPeQLJ2aqhVmggPb20iAv8zTothDw SxTZ4oeuwSzPFC3mXKF9Y/CgNEPMs/u2Cofp3gEhfwao79T3d0jbN8xyq1TG5ypI tkJNB2fFIpbFII0HIilKk7DluzitNpMFW0UOP9lkT9VWihv6aV05/4QJgLiTtsA+ NQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 348247448296285989405378647886850778786312 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-04 18:19:20 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-03 18:19:20 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'domhugs.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26329210244857164613125836497161495720740890937750652562458385109457768918616071002930315270036506143227245238586128722247258575807845829024832121300767168245182326491349046875400013051684441080690538119646875539979366532414519461400568710458578965336383069711943299140798367539775183812564156085980691716566294242954801246908851267824894155892457684187918521351352964267065254453807344343723886554497077034500375543226208064160218501271696757818992537357916040834875892737796656094443452405078692583408446804377865782100727951567833555387268801265355025066723876535086486147541256418397948167560401646746668541951541 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 43431091b122fa229c76c8d95ee9b5a3d86a8dc2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'domhugs.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.domhugs.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.domhugs.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016cfdb78b640000040300483046022100dbbb0aee3553655746f1bdbb55738a25219b6c58cc34528ebd15fa8990031420022100e9789dec63530c64ac0bdb0449dbd40f2d58ad3d9ae6b3b4f6aa27e7f7dc6a32007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016cfdb78b88000004030047304502206b27d5d6f11138371ec4ce6aa18284498c54335d2fa1991fbfbce40d5f3994d902210099950460c12d3d7b6ae4376caf39f8041136c2118eabb256cef3f07d0a347e69 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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