pet.dns-stuff.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:f7:d4:2c:8d:d7:47:f9:bf:b8:14:58:1f:10:6f:ac:43:84 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=pet.dns-stuff.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f7:d4:2c:8d:d7:47:f9:bf:b8:14:58:1f:10:6f:ac:43:84
Serial Number (int): 345668630097796802531842915977079951213444
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 20:5a:54:0b:46:7f:96:17:f4:96:ae:07:eb:e5:ce:40:22:72:72:15
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): a8:fc:b5:a8:0d:40:25:01:73:f5:27:b6:33:af:6d:43:9b:bb:e9:f9
Fingerprint (sha256): 68:a7:f6:66:b5:f0:bb:ad:92:db:8c:ec:24:e4:a1:f9:58:e1:03:cb:d3:1c:29:4f:bf:a8:3e:54:f1:4f:30:24

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate pet.dns-stuff.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for pet.dns-stuff.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

pet.dns-stuff.com

Other certificates including the domain name dns-stuff.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for pet.dns-stuff.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 345668630097796802531842915977079951213444
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-24 02:10:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-22 02:10:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pet.dns-stuff.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 690756663809957672746094556181375078625942752031443433007618154053986263200985553058654922636946641351592015743066088884419847480782607863930594426043345445718089763430522027048859008629028920548659613287958755091110843668780552331706347566181218717124100512137760586925821337694848415390892324002416356343787723297699984399588220611718834714723347509532055658714766704213436113457370411351332705255732610986537660797251940928497525205125194315473180826102646074544164591019206069059147116983171697687095879150806175315361035298198745825529151267465140818536865294477723848352654426335234750027934286824266319264043049364523804732608726482775733049804679690048569247147208488481077313745105142043307898527113815591860322049776385614975928254273091252472861787702344215699709420659868658530249330628816724841441941235857759115453313856024852149357174816446498002421878236711821676817061475790310416124358417177325366516677759525778825477502877131336016206614473566069305011212297529644420211393626537217508343910345108234463187236425483676590830079903655819370569176014820694517608408706180511061450318439788353984994706629334835510025785970265948662060501465504437627232001022363657369361907343922045520349268862702546142489858587271
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							205a540b467f9617f496ae07ebe5ce4022727215
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pet.dns-stuff.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016c21f5234d000004030047304502203f94e25847aee3d5a97763aa3d30869efd3bea5c83cc13333d967bfdaff52e8402210096fb40949acdb2d77e41727bde362a01d8d8143ec386c8a1be1abda7691b46c1007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016c21f5253f00000403004730450220270dabe415657eb0b92159099fd061c8068c1348a23efb66627753776d528f2f022100a973eadebc650f7628e8c5e09d5d38e977583441b30f94652b05c4f3a2882ccb
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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