football-dd320.xyz
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:93:4a:3f:b4:e1:9a:02:5d:b6:05:af:81:43:77:0f:b9:14 was issued on by Let's Encrypt.
With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=football-dd320.xyz
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:93:4a:3f:b4:e1:9a:02:5d:b6:05:af:81:43:77:0f:b9:14Serial Number (int): 311457059387756594312635323599202003433748
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 8f:02:26:51:73:bc:4c:e2:ee:8d:10:73:e8:99:e1:87:1d:1a:3f:01
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 6a:53:67:d5:66:44:82:eb:9a:7c:ed:b1:0b:aa:19:23:78:ae:eb:4c
Fingerprint (sha256): 6c:2a:3d:ce:1e:57:08:88:68:1f:32:e9:f4:01:26:6a:5b:bf:53:0f:05:2e:86:d5:b8:21:75:9f:9e:b1:c8:66
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate football-dd320.xyz
6
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for football-dd320.xyz
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
8 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
football-dd320.xyz
gameflex.football-dd320.xyz
liveupdate.football-dd320.xyz
mgames.football-dd320.xyz
mobile.football-dd320.xyz
www.football-dd320.xyz
gameflex.football-dd320.xyz
liveupdate.football-dd320.xyz
mgames.football-dd320.xyz
mobile.football-dd320.xyz
www.football-dd320.xyz
Other certificates including the domain name football-dd320.xyz
(limited to 100 certificates)
Certificate
The complete raw certificate details for football-dd320.xyz in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGlDCCBXygAwIBAgISA5NKP7ThmgJdtgWvgUN3D7kUMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xNzA4MDMyMjMxMDBaFw0x NzExMDEyMjMxMDBaMB0xGzAZBgNVBAMTEmZvb3RiYWxsLWRkMzIwLnh5ejCCAiIw DQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAO3wk1f4nyNjVBwVNcTLpHaOGPk6 bNNcEAqc4svlvIN27ZZaEAkUBsEOeVQROEVHNexKO0qqEsQRjbQaMnvzZjHXNfeZ DfwwvT+sma1pJyIduch1x8hhy7XXBzq8Jbl+ywg1jWYhBN9/lkblnmNkEg2bfwCA CYXpiGAV5Rwvg39BqDndSqh57K1veUELFNwzJqbv5UCh/HDz1ryIvsUh6YLFhidW lU43j5/EHFng7TgIsSaV+kTHiCvBLAXV/O/cP/a+Aoyb20+E3aXS0qOLpCY4FYa/ sN+wJCxrAU70k0dXmiCbbvsbQYIjZLHmBM+mVpN31bQdiphg4WbOzB+OEcXjP5SM XQGLUiRr8uPZtRSJVYvhdFZ+UjaVBb5Ggbis/C/C/AOjT4SEE+fQSZJ5GGqYK5hN fhCQrkKgR45pWT8cBxRfN6CEwIka/MZ8kjVDzdag0i1sUkgPGx0XKjKP6YJiTkwR aDipuXaiW5jvc9ycuAxWSuHi45d33bTeoCMFhQfJrYB6kNQY3i3nHnyST+as6Mf1 i2YMjYmfPdCax/VL2gzkm9tLyEe4FfvVOo/spRl72X1YRamFOEiomHx9V5VeAElM TLebvXlxVzrMPJD1TCpBt6Rfe7XBgZAKPtUxgKO2zpC/YO09rh3X7MbaFs3hYjcy le6vXyW6rHof7VcVAgMBAAGjggKfMIICmzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0l BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYE FI8CJlFzvEzi7o0Qc+iZ4YcdGj8BMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZF Ze/zqOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3Au aW50LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQu aW50LXgzLmxldHNlbmNyeXB0Lm9yZy8wgakGA1UdEQSBoTCBnoISZm9vdGJhbGwt ZGQzMjAueHl6ghtnYW1lZmxleC5mb290YmFsbC1kZDMyMC54eXqCHWxpdmV1cGRh dGUuZm9vdGJhbGwtZGQzMjAueHl6ghltZ2FtZXMuZm9vdGJhbGwtZGQzMjAueHl6 ghltb2JpbGUuZm9vdGJhbGwtZGQzMjAueHl6ghZ3d3cuZm9vdGJhbGwtZGQzMjAu eHl6MIH+BgNVHSAEgfYwgfMwCAYGZ4EMAQIBMIHmBgsrBgEEAYLfEwEBATCB1jAm BggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwgasGCCsGAQUF BwICMIGeDIGbVGhpcyBDZXJ0aWZpY2F0ZSBtYXkgb25seSBiZSByZWxpZWQgdXBv biBieSBSZWx5aW5nIFBhcnRpZXMgYW5kIG9ubHkgaW4gYWNjb3JkYW5jZSB3aXRo IHRoZSBDZXJ0aWZpY2F0ZSBQb2xpY3kgZm91bmQgYXQgaHR0cHM6Ly9sZXRzZW5j cnlwdC5vcmcvcmVwb3NpdG9yeS8wDQYJKoZIhvcNAQELBQADggEBAHUxPC4W3a6e mHEfwTIqS2nGHeMV3P/s/X1RAf0mjXNdT/JZVvwbUTnAOe/S4nWzAob7H0H3JEPX ylSlKKlkosZfnQzBx6LP7xyjXiahQd0sFnT69dJBoZ+Li71sWZtcyRSRXJ+Qh0zu YaWimghiXPvDuB4Mo62FpOclP4b2E5UN3yE/oEhqBy0QjbK/IwW9WT/k/6GU6XpK jcqHGa045Yq3Qn3pV078z+EVDxiPH67Tlwsx4lvvZo34VizeelUXyvChRcr9vxcB 6/+UepCB+Ca+1vMcSrFBXWaOVua7T4ecoX7dlN4b45sdrvhw84U+VCj8Iq5aUQgZ /wPDHqV4/3w= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA7fCTV/ifI2NUHBU1xMuk do4Y+Tps01wQCpziy+W8g3btlloQCRQGwQ55VBE4RUc17Eo7SqoSxBGNtBoye/Nm Mdc195kN/DC9P6yZrWknIh25yHXHyGHLtdcHOrwluX7LCDWNZiEE33+WRuWeY2QS DZt/AIAJhemIYBXlHC+Df0GoOd1KqHnsrW95QQsU3DMmpu/lQKH8cPPWvIi+xSHp gsWGJ1aVTjePn8QcWeDtOAixJpX6RMeIK8EsBdX879w/9r4CjJvbT4TdpdLSo4uk JjgVhr+w37AkLGsBTvSTR1eaIJtu+xtBgiNkseYEz6ZWk3fVtB2KmGDhZs7MH44R xeM/lIxdAYtSJGvy49m1FIlVi+F0Vn5SNpUFvkaBuKz8L8L8A6NPhIQT59BJknkY apgrmE1+EJCuQqBHjmlZPxwHFF83oITAiRr8xnySNUPN1qDSLWxSSA8bHRcqMo/p gmJOTBFoOKm5dqJbmO9z3Jy4DFZK4eLjl3fdtN6gIwWFB8mtgHqQ1BjeLecefJJP 5qzox/WLZgyNiZ890JrH9UvaDOSb20vIR7gV+9U6j+ylGXvZfVhFqYU4SKiYfH1X lV4ASUxMt5u9eXFXOsw8kPVMKkG3pF97tcGBkAo+1TGAo7bOkL9g7T2uHdfsxtoW zeFiNzKV7q9fJbqseh/tVxUCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 311457059387756594312635323599202003433748 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-08-03 22:31:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-11-01 22:31:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'football-dd320.xyz' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 970709482639072973140383736282661512189628672448984067005215959860384970520215959135725894212843335072044829922893216708593015683242628331771473525482109607372722341377171704297690605227856061261805550214654845358563191845598510373410911360142317107447397010964818363781776550043746476607275324397538615838021220330138764531617318592214121647837538507906715230344820864246191833154961135121642436584229443934268666577477439444889527524601550673223626698037886173379412969874293276848836987818164053271859917264597440609184826602403695548909056672760662404866675619591225102052061199426218096401426465279989794810363811779755086110368107686900343490198612156125781628486989203535018317313112964080123204836199093416060688109580507184896142709698923056364406011386690440396155637812118932978727629052601188276750734692405423950048049082094696500530644939573034568206910013921728596010229107060484884374007363054801730094154822241500631754449758879400624766386707371780927562239985084710028780902881204985242456130397542530370415913592642731420801764556981849203682366090208818985655088588542738891840439883236001730300293808993489105433261187981596408696307507941747149973308975110894746949522420592018786369690161635150127549823932181 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 8f02265173bc4ce2ee8d1073e899e1871d1a3f01 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (161 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'football-dd320.xyz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gameflex.football-dd320.xyz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liveupdate.football-dd320.xyz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mgames.football-dd320.xyz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.football-dd320.xyz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.football-dd320.xyz' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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