newpunch.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:a4:1f:cf:63:39:6d:af:bc:98:93:ba:d4:bd:ab:76:b5:07 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=newpunch.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a4:1f:cf:63:39:6d:af:bc:98:93:ba:d4:bd:ab:76:b5:07
Serial Number (int): 317185448856142199392781105277500755719431
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 7e:5a:92:4e:2a:0f:4f:bd:61:6b:e1:76:3f:f2:71:28:4c:ec:f5:4f
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 97:cb:28:7e:79:b8:17:15:6f:43:b8:3b:46:54:c6:2f:7c:29:e2:2e
Fingerprint (sha256): 5f:ac:70:a0:a3:f5:60:21:43:0a:62:93:ea:83:14:d4:50:54:41:f5:08:c7:c0:1f:7d:54:d4:2f:3e:ce:d5:cd

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate newpunch.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for newpunch.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

newpunch.com

Other certificates including the domain name newpunch.com

(limited to 100 certificates)
www.barbareschi.com
grandforkssportsmed.com
mission80-5.org
newpunch.com
newpunch.com
newpunch.com
50co.com
newpunch.com
bgt.bible
www.mayotech.com
h8.org
www.newpunch.com
www.newpunch.com
www.newpunch.com
newpunch.com
www.epicsaving.com
neotrain.com
cliptd.com
www.cockerspanieldog.com

Certificate

The complete raw certificate details for newpunch.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 317185448856142199392781105277500755719431
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-18 00:07:59 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-17 00:07:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'newpunch.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 795032066616620588673368036501704856409391105895793664871267441333683330655374340114082794489448907168742134780720871896025619116208219451257911472733009970095149726126822594034910428716672505097841757783517571624338947007389569310835702379980903127058921735521490175951459967141836692571148293661607011435776528260114732615782557682719363919797687708436286402216194846982818889804138235845332217227840945471253662982035894124871456988856551670944388769291010567075129373592175055383535927307309402782892304505060994564884285579415025948308360120852450658024232275787693096862642630240071942304043664056823118940629215555240071924258076162844597443724657084177076461621363136846808321286173646584367945167670709305440637089778891430409109935186295824616138113669857748550704741723317122961286512168624014384317038687889018249109008511089374797543986739763078080989671127654044792136793171872758254012261877707038091064179480193618143598812530457093868040107793401568321587639118520075315716239129682211145196190497488556112895792603372242271344711879645911074592131346105906925961341370327806826391315674856448151152116587440858102827957893598602490942693327066931145560873803758471004319282645874992893620437362512316537970768827141
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7e5a924e2a0f4fbd616be1763ff271284cecf54f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newpunch.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016f168c20c50000040300473045022048b7ff0d3bcd11c6d78b3fdd84ea993669c2a7fd01173616767306793134467f022100f56f68ecc5383507661db53bfdc2ff819183ce298ba50fac3321e57512ae22e8007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016f168c20bb000004030047304502210086342c8709749749a1e9829d56e58335247e47af16173e30e426b7f96078431a0220295470a9ed2b42c5900e12045f08bfe593c46c1c8cd89830c446c6ebe81e8b6a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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