forum.lifebit.ai

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:c1:4f:ae:c1:ea:fa:dc:c0:d7:2e:38:41:19:1c:d1:c6:37 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=forum.lifebit.ai

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c1:4f:ae:c1:ea:fa:dc:c0:d7:2e:38:41:19:1c:d1:c6:37
Serial Number (int): 327117271015464338462179406280681084536375
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: cb:e0:2a:a7:56:c1:f1:1a:62:59:23:43:ee:96:c3:08:81:83:cb:c0
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 7c:95:14:47:0d:38:21:84:23:01:d4:7a:49:2e:8c:b2:7e:65:94:c5
Fingerprint (sha256): 5f:a3:2b:62:b0:ac:a9:bd:4f:2e:e7:f5:8d:4e:7e:99:3b:ad:d7:7d:50:8d:7a:08:00:e2:5e:bf:85:10:66:e0

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate forum.lifebit.ai

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for forum.lifebit.ai

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

forum.lifebit.ai

Other certificates including the domain name lifebit.ai

(limited to 100 certificates)
forum.lifebit.ai
test-endy.saasquatch.app
*.sdlc-test.lifebit.ai
opendata.lifebit.ai
www.onpageideas.com
opendata.lifebit.ai
zabacus.org
www.excellfeeders.com
forum.lifebit.ai
elmoradillo.com.ar
opendata.lifebit.ai
tls.automattic.com
lifebit.ai
opendata.lifebit.ai
forum.lifebit.ai
tecto.app
derneuenovak.at
opendata.lifebit.ai
www.arches.app
ssrdigitaldisplays.com
travelgallery.in
www.lifebit.ai
test-endy.saasquatch.app
edubarbieri.com.br
www.upform.io
www.synsho.com
lifebit.ai
tls.automattic.com
alisdairmacleod.com
opendata.lifebit.ai
blog.lifebit.ai
sspuat.console.aigens.com
dylankamauoha.com
deploit.lifebit.ai
lifebit.ai
*.lifebit.ai
www.cedros.pe
forum.lifebit.ai
*.lifebit.ai
lifebit.ai
*.sdlc.lifebit.ai
*.lifebit.ai
*.lifebit.ai
tls.automattic.com
*.lifebit.ai
*.lifebit.ai
deploit.lifebit.ai
forum.lifebit.ai
tshirts.cortlan.co
silconp.com.br
admin.teetra.com
tls.automattic.com
lifebit.ai
www.sysdev.co.za
opendata.lifebit.ai
*.lifebit.ai
cloudos.dev.internal-lifebit.lifebit.ai
www.jackscherlag.com
forum.lifebit.ai
prmibr.com
*.lifebit.ai
adamscourierservices.com
diskover.app
www.chakkumkodefoods.com
tls.automattic.com
lbfrontiers.lifebit.ai
fromthisdayforth.ie
tls.automattic.com
lifebit.ai
lifebit.ai
julioromano.dev
lifebit.ai
admin.levelup-livetransfers.com
www.tweetsweep.app
*.lifebit.ai
floof.rodeo
buraqautomate.pk
test.blog.lifebit.ai
alisdairmacleod.com
*.lifebit.ai
tls.automattic.com
www.djolonga.com
*.lifebit.ai
beanstalk.simplesoft.co.nz
www.lifebit.ai
www.oversight.ai
lifebit.ai
www.dunware.com
lifebit.ai
lifebit.ai
forum.lifebit.ai
www.copiedapp.com
tls.automattic.com
lbfrontiers.lifebit.ai
tls.automattic.com
www.buk.app
*.lifebit.ai
www.lifebit.ai
www.lifebit.ai
selektor.myemmacloud.com

Certificate

The complete raw certificate details for forum.lifebit.ai in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 327117271015464338462179406280681084536375
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-16 23:19:10 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-15 23:19:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'forum.lifebit.ai'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 777944816312313871990325484229549621130355578720076403025934071927558673225190287042868862156961168546825361748544147273096014801462211618052155651534938758567788278909583310013897227626914555197892767158971098297237627653881746778012703002051015995036482571831106934829393290111871446584866753696124344933866418328554644792520461923075240743306332690826783694425994649675074385897151571001130346196950692871578456605766254837089962757055935191942685183074174008947716130643466522576982025727093701597331558121198363626269748227065686469685403374793499457230827960854498984786366268759617383675561218880760631700906251133967500649994621468503331403698894614073960684426480213194042408304087751973290882293233844069955260300816872056626615102239030103547086942418768314146777048797681251543954449919126099056874661375434960426420088267434324344456383205338912725822853975984776055939784565746100364857471177816891029248239026674364722833330169073832247200902792686722941312906648931107375807451847353433819882622809964641286415278176614477118616224066742424649526917986844849210133445958934149454067153231630233795215666891474251457371044067801599783129638661732244777984410676718420599841156305797410367933407292259274314807535267131
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cbe02aa756c1f11a62592343ee96c3088183cbc0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forum.lifebit.ai'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016d3c965f160000040300483046022100d027d92da5adf6e2eb033396e81f74231bdfabf9445dcd56677f3f46694c7fe2022100dab4b4bcf4b93181867f9d72024bac2fa7563da76c3b253e52d38fc2bf77c4d1007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016d3c9660f10000040300473045022029c843f569641914df9a36c19310e0b5e33bb2aa7f7b8d2bad57f4e8499bb4e3022100bf81f5ab85ab2b998faaf24ccca000bb55c366f6abf40977956cc1a585fc887e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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