www.ianchan.dev

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:9a:40:6e:cd:41:48:5d:50:7f:8f:ed:e6:7c:ba:a5:cd:04 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.ianchan.dev

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:9a:40:6e:cd:41:48:5d:50:7f:8f:ed:e6:7c:ba:a5:cd:04
Serial Number (int): 313825988208556131803106776242645765573892
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 15:c8:ab:2e:6c:ab:dd:29:6e:83:06:07:91:61:da:d1:8e:81:fb:6f
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 9b:83:4e:44:e1:28:a9:3e:57:a8:c6:26:21:2c:2c:95:58:6a:4f:5b
Fingerprint (sha256): 67:75:ab:5c:91:3f:07:4f:4f:3d:60:a6:b8:24:69:8c:96:4c:68:1b:10:09:92:d6:34:10:1f:a8:53:29:17:1a

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.ianchan.dev

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.ianchan.dev

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.ianchan.dev

Other certificates including the domain name ianchan.dev

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.ianchan.dev in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 313825988208556131803106776242645765573892
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-04 16:31:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-02 16:31:14 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.ianchan.dev'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 758006535048314795179332129521638077397048176059847686750806432457416585894196026398837082417058888908418461180028860035778581106614544516265215713093163228839696017892125653846907135974729869256354720068509657923313302076156954730964147399287788015615736964401886916935146298845214799706158575455259686998996820742494493034168209771632603404525054548348183559308952851542377390105324288210880730118234860740618896153380092979914710447894714020506337677235560291805845651367551659351356238870884285013303248866585295320623872453533235162467828061795242074135268880755546331542700657467685961419774728788467832133681255251110276204724710562544002958362634176956615637023761561736006040970381038220699318720536747101390502896764397172140699791515623659912094756350275039307039645714727249471156617750288271653412811296355901817808911789436363772692316771386451954466309238803476334678087525508753953003225149468076887066251879990568068326809824998005518489005994710410969696389210077168805751519109403072409954719151549302165987770813324151565572599715116371483917292378904913449698813677747741289049621920115952229695335372869481033293126503342270366472025556901160639672095775764871387578335697540786251740990651969773035763878851969
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							15c8ab2e6cabdd296e8306079161dad18e81fb6f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ianchan.dev'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016c5daf71210000040300473045022100dc4318e45bd1e295ffe70f342b17ede5be8da373bfb36d3378f0f144f4cae28e022002a4cabc4c315218a5bf831d985045f220c580fb651d7f6c22b91c16aab06704007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016c5daf73320000040300473045022000d23845f06e8810262e7b1d825a5905a716486e57d71c7626c12db5794edfa4022100c2951dd888662e288d543834ed81d5cafcd9e68006e63bd3eb53bfec187d921b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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