www.withdraw.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:81:a2:22:db:5d:79:9f:10:24:06:fd:cb:16:10:98:6e:fb was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.withdraw.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:81:a2:22:db:5d:79:9f:10:24:06:fd:cb:16:10:98:6e:fb
Serial Number (int): 305448799050745710577355367661535621574395
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 74:e5:2f:80:c8:17:30:48:b0:75:c5:01:bb:52:c1:46:aa:59:a3:c0
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 9a:31:e8:e2:61:a8:c8:6b:c9:4f:90:c6:18:ce:32:dd:e6:e1:6f:6b
Fingerprint (sha256): 69:2a:e3:fd:3b:02:39:b8:72:f3:f5:8f:2f:50:a2:bf:cc:8c:c2:c8:f7:19:cc:6d:fa:24:ce:79:69:7f:2c:12

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.withdraw.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.withdraw.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.withdraw.org

Other certificates including the domain name withdraw.org

(limited to 100 certificates)
withdraw.org
www.withdraw.org
withdraw.org
www.withdraw.org
coltelliinceramica.com
www.withdraw.org
withdraw.org
www.withdraw.org
www.withdraw.org
withdraw.org
withdraw.org
withdraw.org
www.withdraw.org
withdraw.org
tifiamo.com
withdraw.org

Certificate

The complete raw certificate details for www.withdraw.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGWDCCBUCgAwIBAgISA4GiIttdeZ8QJAb9yxYQmG77MA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA4MjkwNDUzNDdaFw0x
OTExMjcwNDUzNDdaMBsxGTAXBgNVBAMTEHd3dy53aXRoZHJhdy5vcmcwggIiMA0G
CSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQC1wvN2Lr+0nmVYdB6CVeM4vdEMrGLI
SCAPGZW/bwpZnLuPgZPWjjFiuDDmCIpZPtfVp3hr8eHkTWkBwlbDXorxGLr37SCt
SeG8A1AddI12zq2MQ5+4gq5zI+SgyXzDWxy2l5WRmlUPKDf3DLbSxNxQ7kUtxZ5v
ccZBwpjNbFYHxKKiLIGJN0MGVDAnl88864Dhe4Gq32twDfnGNX7yJ8IlrKIB/eNY
/ar++5qS6cqHahaylxys08UKmNFK7+gbWkPCVFaOmqXyYbAP/aSGZKHasxHVDUAP
Wk8s4MTTWSzKa1D+19hHWbsgPp2j0ENkyOivBUY0TEH5ir5ks0y+YHvQifAdcMPs
qc4hMjyjKUBxs8dAnJ8o+wp0rzfm767FTGrGmw/SZZaOU13df8BfvA2qgUEVA9WP
nUOmpXquNRVs9hPeOMICJiilXx1WQHyHrdqFPgd4bPrhOVcT/6TfvXrjcYiMBKXy
MzOJJT/EnZl3GCZsS9d/AUwy/staEa+qEgP9xoEVsrdw3F3T0GwAZVVFbDv15VHf
9y3wiARCtBzcgsBmQMuEk8/5FyNL66EzuA0vCcMt6eXxJ6NMfs39nB3m3ixH98Fv
k27WIyIhA5K+GcrFLjqrpJslSMR33bc9iICo73ZTCa4390UIfP3/GXSVxPpRWvFq
joY66dG8dRhF0QIDAQABo4ICZTCCAmEwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQW
MBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBR0
5S+AyBcwSLB1xQG7UsFGqlmjwDAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv
86jsoTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmlu
dC14My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0Lmlu
dC14My5sZXRzZW5jcnlwdC5vcmcvMBsGA1UdEQQUMBKCEHd3dy53aXRoZHJhdy5v
cmcwTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEF
BQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEEBgorBgEEAdZ5AgQC
BIH1BIHyAPAAdgDiaUuuJujpQAnohhu2O4PUPuf+dIj7pI8okwGd3fHb/gAAAWzb
7+PtAAAEAwBHMEUCIQCOGT+MTSYOceMVWigt2sm+AEz6t7mponKOi4f7l08qcQIg
BSwarUsp2PTwK3y3+DSi8ceNqNL+Af80+ZQqaz/IhXAAdgApPFGWVMg5ZbqqUPxY
B9S3b79Yeily3KTDDPTlRUf0eAAAAWzb7+PfAAAEAwBHMEUCIQDwFTsCksPMiPoF
j0tbcLNP2hN/wUrTClqOUZFULwAviwIgEmfsc+pzDGdKAKvVb5Qg7UcMqiaV6DsK
KSx7wwwg+6QwDQYJKoZIhvcNAQELBQADggEBAF8A+PxWnX6HJo6b0yvx+fiyr66R
LjbfQJCwdRu1K2zieYp3YpTEu+vMLbgZWAwFLr0XicoH71ShwzArt7DnxanxBSmU
Hp65VapRi0wJvayhbu8TW9y6ACE8/FNdQmzvh8/26upvhl2MR9ESDVqlEibsYbAY
HmVKANoN+br4pKcRo5yVwbzZEYCNSRSImKwIYKFUMGygFzSirr/nBh/wl1AmzKyX
wEOIVPoW6Bi3aeSLh/d4Vt7gtvUbi7LzptveD9MQS0mPRvVholyyeo3E4yKvvqv2
AxK2Je4xfkH2s/HB3EqDEkIqILrQCiHLwdA/67DKwbNp6JWKZ9l9ipSGBBs=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAtcLzdi6/tJ5lWHQeglXj
OL3RDKxiyEggDxmVv28KWZy7j4GT1o4xYrgw5giKWT7X1ad4a/Hh5E1pAcJWw16K
8Ri69+0grUnhvANQHXSNds6tjEOfuIKucyPkoMl8w1sctpeVkZpVDyg39wy20sTc
UO5FLcWeb3HGQcKYzWxWB8SioiyBiTdDBlQwJ5fPPOuA4XuBqt9rcA35xjV+8ifC
JayiAf3jWP2q/vuakunKh2oWspccrNPFCpjRSu/oG1pDwlRWjpql8mGwD/2khmSh
2rMR1Q1AD1pPLODE01ksymtQ/tfYR1m7ID6do9BDZMjorwVGNExB+Yq+ZLNMvmB7
0InwHXDD7KnOITI8oylAcbPHQJyfKPsKdK835u+uxUxqxpsP0mWWjlNd3X/AX7wN
qoFBFQPVj51DpqV6rjUVbPYT3jjCAiYopV8dVkB8h63ahT4HeGz64TlXE/+k3716
43GIjASl8jMziSU/xJ2ZdxgmbEvXfwFMMv7LWhGvqhID/caBFbK3cNxd09BsAGVV
RWw79eVR3/ct8IgEQrQc3ILAZkDLhJPP+RcjS+uhM7gNLwnDLenl8SejTH7N/Zwd
5t4sR/fBb5Nu1iMiIQOSvhnKxS46q6SbJUjEd923PYiAqO92UwmuN/dFCHz9/xl0
lcT6UVrxao6GOunRvHUYRdECAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 305448799050745710577355367661535621574395
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-29 04:53:47 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-27 04:53:47 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.withdraw.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 741522337173974434668183942337660609825389007033456321639587450035240161689618473184748044887231475415976278803597481288134983782169288729341936425744256647737576134961701403446742471947591351312248299430168973046390690453175991562647027972722842387019159548911530941533248347961188880509039561354273749807266364040253808592193704025668221157857468055026613187260375125070040144778319399722561629477585521253424436263824103284553829210549792720278373023910008688596001813860148632523208107195888751092118261300013012704260877888696853945451518134531791154949123592248259473256195943575450474889704501141589646785583784578925915531511313040024265716079636284623210558841207056024110377691384755955764243656929091353707220235843954621763766194967693858861337022341960563389580455255719013159922071416611988025322324261880434705841006825847044420691405500753773872071990942911913246469494418106101732206232014840696455026779575470223804402785322389819071917935598344397240140297805906608702282860474026945579764553703491345484346652927915812333542914795741323330837339055205586931580367135323746051198492263142553493105835182770518785887925691607949805013485732321249789595683535707695239668108342122628342571874873460633050334549788113
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							74e52f80c8173048b075c501bb52c146aa59a3c0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.withdraw.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016cdbefe3ed00000403004730450221008e193f8c4d260e71e3155a282ddac9be004cfab7b9a9a2728e8b87fb974f2a710220052c1aad4b29d8f4f02b7cb7f834a2f1c78da8d2fe01ff34f9942a6b3fc88570007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016cdbefe3df0000040300473045022100f0153b0292c3cc88fa058f4b5b70b34fda137fc14ad30a5a8e5191542f002f8b02201267ec73ea730c674a00abd56f9420ed470caa2695e83b0a292c7bc30c20fba4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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