todaygoldquote.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:40:a4:04:b0:8d:46:8c:0f:aa:b6:09:13:69:7e:9e:66:65 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=todaygoldquote.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:40:a4:04:b0:8d:46:8c:0f:aa:b6:09:13:69:7e:9e:66:65Serial Number (int): 283332947019614056375486479053712374261349
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: e3:e0:4c:fb:03:7e:3a:db:7d:ed:a3:de:ed:8f:6f:88:0a:25:1e:c2
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 91:25:fc:45:4d:a2:0b:54:f0:bc:45:ad:3b:e2:ac:d6:c2:2a:1f:69
Fingerprint (sha256): 5f:db:88:00:a1:75:fe:4d:9c:59:ce:fa:07:41:e2:ae:08:9d:7e:dd:3e:b7:af:e8:08:c7:42:98:f1:04:1a:70
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate todaygoldquote.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for todaygoldquote.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
todaygoldquote.com
Other certificates including the domain name todaygoldquote.com
(limited to 100 certificates)
www.alaskaregenerativemedicine.com
todaygoldquote.com
www.todaygoldquote.com
todaygoldquote.com
fly.travel
www.todaygoldquote.com
todaygoldquote.com
www.909leaf.com
todaygoldquote.com
89741.com
portsaintluciedental.com
todaygoldquote.com
www.todaygoldquote.com
www.todaygoldquote.com
www.todaygoldquote.com
todaygoldquote.com
todaygoldquote.com
www.todaygoldquote.com
todaygoldquote.com
todaygoldquote.com
www.todaygoldquote.com
todaygoldquote.com
fly.travel
www.todaygoldquote.com
todaygoldquote.com
www.909leaf.com
todaygoldquote.com
89741.com
portsaintluciedental.com
todaygoldquote.com
www.todaygoldquote.com
www.todaygoldquote.com
www.todaygoldquote.com
todaygoldquote.com
todaygoldquote.com
www.todaygoldquote.com
todaygoldquote.com
Certificate
The complete raw certificate details for todaygoldquote.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGWjCCBUKgAwIBAgISA0CkBLCNRowPqrYJE2l+nmZlMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA2MjYwMjEwNTVaFw0x OTA5MjQwMjEwNTVaMB0xGzAZBgNVBAMTEnRvZGF5Z29sZHF1b3RlLmNvbTCCAiIw DQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAKQQhe/Sbq7j8dPtAQynl74sBpTY wLESLgCJd3hHO9+5RNwBLGcn+Q+U8jxOaBHcTDGvN7f/bjEVdlehaKhctXub8urf OBgQWKr/xu+7Kpp4zzOQIgz7qtvLRAk7SegKQrWAIt0JCWcdtXn+LRYk/iMdbvAj enaUaSvPq8CHhf4kf50uG+5VmjuJtxGLDbqFgWTN0oeQK3L8RxueCmfKuYjdojTV N19fTVI+hmXZe3mv2CGLpYPFh63STRiiFI4kr6gTwzonFgTr09YIi+7QdmwLTt6I tnEts6Kwr8NKLdALromZQTmIOmEnMKZG47QYHsPUFIsGC2Sq0HZE5zgdWmXAcBtu zRnDZ9aVmP09KL0VWPpV6y7hnP5QDoxwMVRRECc4qF/QpJaQP5qYZqrAnZ1t2Uhz 7UpuhxIYXEIfHF1ziHZC4Y9GXQUorlLJbzxoV9iC2+FjuS/SWCao1dt8S82RzApb 4sdSWu+9gGKriwykw3kk25FG+yapL+iXp4YM/YvgIFqaq39TdhH4C53EVdlejLyk 9AzSV6s6ErELryHUES1LN6eBVRo5YZ4edO2IDWcEpE5b2/6++1Q7583b4m33K/h1 L33jmK2zf1Q4RfQPems0PBWM+wQ89UfgziYHC41p6M+vTUVewIOGX0weTDB/y47h 9s7w6cuhb+hegwHpAgMBAAGjggJlMIICYTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0l BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYE FOPgTPsDfjrbfe2j3u2Pb4gKJR7CMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZF Ze/zqOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3Au aW50LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQu aW50LXgzLmxldHNlbmNyeXB0Lm9yZy8wHQYDVR0RBBYwFIISdG9kYXlnb2xkcXVv dGUuY29tMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYI KwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBAgYKKwYBBAHW eQIEAgSB8wSB8ADuAHUAdH7agzGtMxCRIZzOJU9CcMK//V5CIAjGNzV55hB7zFYA AAFrkcPJGQAABAMARjBEAiBKQACpaF7NQGna0YyNDR2BpnpXlmV+Muvjh/PciuFh VgIgC9lysqoMItlRSMWb0leIvCSlS2ww9/1EPnQizoODqM4AdQApPFGWVMg5Zbqq UPxYB9S3b79Yeily3KTDDPTlRUf0eAAAAWuRw8k2AAAEAwBGMEQCIHszBvZrVjON gJEl+s3Ifobp7Dy2WM0Lq5/pyqNbue8tAiARdOFPcyyUT8kYr7qFClptxBDUkbW1 X1Bj74JL1dw6tjANBgkqhkiG9w0BAQsFAAOCAQEAGfm+H+uQyDAmBD82Uf48kwG3 dQHKypC1wMO7/BVrZQT/Stm2UZNdulGFNZ8yzWsezIEsjV3GBQLZCZg3yBXL2kQ3 O8R/e91iUZQIc5ubEN3ziTsOpCygJsstJNReAsfKV+hfC5beOSrj2vwzYFonm1XK oFYWSiH2JnK1Oomg9nM4kxYfQgStjy6EzOrM2Q6mlU/vOBKN8LOZHc/dUMuHn2Bb h8rSjFD8a1Md6ht5Dt9XmoCOpFDopwoWy7l7j7QVFIofWUoqUkrP3T6Rf+WTuvDQ ELXuERi61iicJBl3OWR8jNK6/0GSVtmxc0UgNDLE4CAjxtZYpiQDGdgg8yO1yA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEApBCF79JuruPx0+0BDKeX viwGlNjAsRIuAIl3eEc737lE3AEsZyf5D5TyPE5oEdxMMa83t/9uMRV2V6FoqFy1 e5vy6t84GBBYqv/G77sqmnjPM5AiDPuq28tECTtJ6ApCtYAi3QkJZx21ef4tFiT+ Ix1u8CN6dpRpK8+rwIeF/iR/nS4b7lWaO4m3EYsNuoWBZM3Sh5ArcvxHG54KZ8q5 iN2iNNU3X19NUj6GZdl7ea/YIYulg8WHrdJNGKIUjiSvqBPDOicWBOvT1giL7tB2 bAtO3oi2cS2zorCvw0ot0AuuiZlBOYg6YScwpkbjtBgew9QUiwYLZKrQdkTnOB1a ZcBwG27NGcNn1pWY/T0ovRVY+lXrLuGc/lAOjHAxVFEQJzioX9CklpA/mphmqsCd nW3ZSHPtSm6HEhhcQh8cXXOIdkLhj0ZdBSiuUslvPGhX2ILb4WO5L9JYJqjV23xL zZHMClvix1Ja772AYquLDKTDeSTbkUb7Jqkv6Jenhgz9i+AgWpqrf1N2EfgLncRV 2V6MvKT0DNJXqzoSsQuvIdQRLUs3p4FVGjlhnh507YgNZwSkTlvb/r77VDvnzdvi bfcr+HUvfeOYrbN/VDhF9A96azQ8FYz7BDz1R+DOJgcLjWnoz69NRV7Ag4ZfTB5M MH/LjuH2zvDpy6Fv6F6DAekCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 283332947019614056375486479053712374261349 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-26 02:10:55 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-24 02:10:55 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'todaygoldquote.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 669324942533007207933505551846072849127019984115184696400479132623763122877345374799265391224862547534871047332628337707826314837984650016550088658164731494332233423044929532389441755082116052806428161257758135550403677240747275840305210714937640301490163219484074350237513618922128285318729443387698802259431252193321052752289607486672144878770242498918685524433674459971651754657892084629718493049581145358981596361994988200976969790394969824789250751208767307599803873309368773451426440919467966083597320997332253575256433715268309305997438354123848097391621626447703424010807248855798530887353849475926783026623492889016961927994161417581397225821473381541061274723981676988826783679448554943827749932725520126606216475264174207318585956649577549911189041772188021986634561459127242314633856301927527324158892984123545748940386401230646524011654136798859633747230731011494680873943200646202078424227602452316238683246838882069443857590450130931087659119672745019757118581422186558593849154343642753849721892563235587251759854642714485471310463791298241171294580221422340963146866268965098522449805839531607342725619696876984563588692151292128038713728375326485726207702736309974808402331504030019074740877146175369913972442726889 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) e3e04cfb037e3adb7deda3deed8f6f880a251ec2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'todaygoldquote.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes) 00ee007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016b91c3c919000004030046304402204a4000a9685ecd4069dad18c8d0d1d81a67a5796657e32ebe387f3dc8ae1615602200bd972b2aa0c22d95148c59bd25788bc24a54b6c30f7fd443e7422ce8383a8ce007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016b91c3c936000004030046304402207b3306f66b56338d809125facdc87e86e9ec3cb658cd0bab9fe9caa35bb9ef2d02201174e14f732c944fc918afba850a5a6dc410d491b5b55f5063ef824bd5dc3ab6 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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