www.abagail.org
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 04:f0:d2:cb:b3:a6:43:1e:6b:5d:f2:0a:bc:dd:aa:78:7a:1d was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.abagail.org
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:f0:d2:cb:b3:a6:43:1e:6b:5d:f2:0a:bc:dd:aa:78:7a:1dSerial Number (int): 430397107347167299022499601278809006438941
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 60:73:85:1e:46:33:15:2b:28:8a:41:c9:3f:92:79:99:d5:40:a2:5f
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): db:6c:03:8c:81:ab:9a:6b:0c:38:2d:d7:68:8f:46:49:04:5c:fb:59
Fingerprint (sha256): 58:95:f9:6d:41:21:37:1b:53:9b:95:66:95:fc:eb:46:57:ae:c1:05:36:d6:94:9c:33:16:ce:60:b6:8c:f4:03
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate www.abagail.org
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.abagail.org
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.abagail.org
Other certificates including the domain name abagail.org
(limited to 100 certificates)
Certificate
The complete raw certificate details for www.abagail.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGVjCCBT6gAwIBAgISBPDSy7OmQx5rXfIKvN2qeHodMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEwMjIyMjE5MjFaFw0y MDAxMjAyMjE5MjFaMBoxGDAWBgNVBAMTD3d3dy5hYmFnYWlsLm9yZzCCAiIwDQYJ KoZIhvcNAQEBBQADggIPADCCAgoCggIBALMme8oI3at0hwnUHmoEzVhh6Fa6aHXk vqCoPm/Nz0TP/y8Zh9zUiRr5FtPdygrMAK7YF0EKQ010qLdzaLG0jnMmncK+BUM0 e08jgKG6phsmTQkBnLbsqt+kodZgzO3zOlAb74fk5lJLbg8U8HiGYhgqsPVE4hVR +g1e6UIW2EH7Md9/6lp7782lo6XPmxxY506xjQafOS7tfd+MM5Pp622xozH0vLAS FZYK1/RNmTVcEXS7jjXK5vrBJlmJ5Ge796oGoklR1dJnp0wRzFmWiZIEderMf5rl M+WEwzVhDXfPUV7j+xt6eshfuURrL/uwoBNcCTRZ3b/Z8DujW4egv9hki+IT4uWc m8USbQq++z3LhL2uT3sDwac1KwxSY9G5/ZnzAN5BoPausOYWRgRpyAxBYCZNNVGj QOJYgzAjURuA1LfbGOf+0J9bPYwTB3hwos/O4hPkEPdTyMDIohxSM/Q+BkK4n+9o Vv7N4EhFAsOEEqxJP3Tz6/jBfmuWMiwIdlpO8g7uUUXohvaIQ+T0a47+GrqLvGHs tMFz1kbty3PtDE36dMMA3aKN3DXQ9Fdd3NhmWEIDvdjbwMVIHvMOQG3Mr3kmYLP9 2rFqWrUKYnRmaIcYie/r+FWBDz9+ltIlylGk8LYLGqK1o5sY3zUqMpATy5D0ubuc 1qvIllVJa4uDAgMBAAGjggJkMIICYDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYw FAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFGBz hR5GMxUrKIpByT+SeZnVQKJfMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/z qOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50 LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50 LXgzLmxldHNlbmNyeXB0Lm9yZy8wGgYDVR0RBBMwEYIPd3d3LmFiYWdhaWwub3Jn MEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUH AgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBAYKKwYBBAHWeQIEAgSB 9QSB8gDwAHYAb1N2rDHwMRnYmQCkURX/dxUcEdkCwQApBo2yCJo32RMAAAFt9cSJ ngAABAMARzBFAiAyxJg03u+oc30uis2dNbrX7OWVmNWCzUxab1iz2FIegwIhALGd nlSG2Dww//hemMT+nRuSmt9CjfADs9hW4d6rXOwVAHYAB7dcG+V9aP/xsMYdIxXH uuZXfFeUt2ruvGE6GmnTohwAAAFt9cSJqwAABAMARzBFAiAdbgMjIVFy+cSfMHo9 8MRY2CtCK30enYxnrLVuIOMtcAIhAM+yoM6/7u5POFZH56rZwlFCaIYXyYoZUZX6 qVxqnr47MA0GCSqGSIb3DQEBCwUAA4IBAQBWHk3msjPpTNGD2hvqYmlcPOdLXye6 kulkvRr0LOR4c1XQakgt7YA9pNM9KcoHMTIeb3no/F+BM1OKFirm3Sh4GAAGQbvI PQFwRsCcMe67LA7+UeHygY/zXyWgPuZRc6vNlHu3ss6k4eYB3vkLKlzNGiReRSzz n57EuMVtoY90OHH0ok4MYac1dH9i2XKa+bvQSNZeTfJrajXrlXjbq9C56TWMPQLu Myj+AF0pXJF02rjvuTwG/oz1v0pbk746/ejo8S/dfoOQM+yqYjbvURxLDUkfcsA9 CjeuNnr/W3dKVAwrxDOAmIZ+4z0tE9SXgJxsLNqIPDCpxxYM7jYS+XqB -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAsyZ7ygjdq3SHCdQeagTN WGHoVrpodeS+oKg+b83PRM//LxmH3NSJGvkW093KCswArtgXQQpDTXSot3NosbSO cyadwr4FQzR7TyOAobqmGyZNCQGctuyq36Sh1mDM7fM6UBvvh+TmUktuDxTweIZi GCqw9UTiFVH6DV7pQhbYQfsx33/qWnvvzaWjpc+bHFjnTrGNBp85Lu1934wzk+nr bbGjMfS8sBIVlgrX9E2ZNVwRdLuONcrm+sEmWYnkZ7v3qgaiSVHV0menTBHMWZaJ kgR16sx/muUz5YTDNWENd89RXuP7G3p6yF+5RGsv+7CgE1wJNFndv9nwO6Nbh6C/ 2GSL4hPi5ZybxRJtCr77PcuEva5PewPBpzUrDFJj0bn9mfMA3kGg9q6w5hZGBGnI DEFgJk01UaNA4liDMCNRG4DUt9sY5/7Qn1s9jBMHeHCiz87iE+QQ91PIwMiiHFIz 9D4GQrif72hW/s3gSEUCw4QSrEk/dPPr+MF+a5YyLAh2Wk7yDu5RReiG9ohD5PRr jv4auou8Yey0wXPWRu3Lc+0MTfp0wwDdoo3cNdD0V13c2GZYQgO92NvAxUge8w5A bcyveSZgs/3asWpatQpidGZohxiJ7+v4VYEPP36W0iXKUaTwtgsaorWjmxjfNSoy kBPLkPS5u5zWq8iWVUlri4MCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 430397107347167299022499601278809006438941 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-22 22:19:21 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-20 22:19:21 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.abagail.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 730869566272528382460613809320242583998673075408435184297906162274545186925300313547609915854406060601863245684522937214362041182018762008857435596989024164370938727573767049825170483038067031937130418948076664101256933621069437428730377495395033678127661287651642947985900912896280480038532202526636034625922891955686075167737806698718691323522824579283080183742991444047623209262133246267588547083167341174575858921079117031434245550555141981929755966308934961448788330840457919440481254281397314022347489436360782233211306963078069332867007570327078636376173888270283573204951436654230224273184888109797783861159462441279389292025374422123474198571199834026972377266306110465937430253190921514356085117320493208939169014423083262477210083072552559220652143183596823069926432552687710740177543667592855770057591110684509604079963388453912671745417078540289862690889166957785297266066901282982624488710277961883854429464062346627443751240269924775767604120727989267230749489825020815226645867321311805810994547626213551412615398709227866686457550666517193130374945599300153563175771606529123115991169556327778029427179495758647542611237823544764212057459026557802264500126749353406862642016169646183782867672617131655614453619854211 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 6073851e4633152b288a41c93f927999d540a25f . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.abagail.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f00076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016df5c4899e0000040300473045022032c49834deefa8737d2e8acd9d35bad7ece59598d582cd4c5a6f58b3d8521e83022100b19d9e5486d83c30fff85e98c4fe9d1b929adf428df003b3d856e1deab5cec1500760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016df5c489ab000004030047304502201d6e0323215172f9c49f307a3df0c458d82b422b7d1e9d8c67acb56e20e32d70022100cfb2a0cebfeeee4f385647e7aad9c25142688617c98a195195faa95c6a9ebe3b . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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