www.holdmypodcast.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:7b:f8:a1:89:1d:82:83:9c:f4:21:77:8b:8e:e8:a4:5c:00 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.holdmypodcast.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:7b:f8:a1:89:1d:82:83:9c:f4:21:77:8b:8e:e8:a4:5c:00
Serial Number (int): 303522076210333178764539359460127483911168
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 0e:86:10:74:9e:90:72:98:2a:ae:f8:d8:aa:f2:ed:44:84:7e:6d:34
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 15:20:cd:85:d8:9a:df:21:58:d5:64:df:b4:39:20:d9:8f:f8:4e:eb
Fingerprint (sha256): 6c:71:47:c4:d5:a8:3f:13:a6:74:ba:e0:7d:87:b8:c2:af:86:dc:0a:57:e7:70:c9:92:77:f1:7c:16:e1:b2:17

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.holdmypodcast.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.holdmypodcast.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.holdmypodcast.com

Other certificates including the domain name holdmypodcast.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.holdmypodcast.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 303522076210333178764539359460127483911168
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-27 08:29:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-26 08:29:28 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.holdmypodcast.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 727325034117574082951868035677890765050573400218920576742662745404274292894036838687994799028697845557113239995212312559281374411600072092210224368964878373831730207092991886575194906073106837260557573962937658855448005796049467972132401727312842285137894443832457318397323046808255104849767431871339141264150377326150267639648686427883308099567433891393565492083767456432338443043129109257466773787416261212211051745516796920279619355159059008052868235059251924230055460096908679528266004149710813940986853587683004101070187017536174684063512610037965231719891837788290675769296185314845598541076323609238361355950884231733034462737465346053577891836273006977631207783397778071955329168069303112447637262595381689346170151603611459085454264434320035038229419191677008318412239911725212740249232559688627512999754675860321420247070361454446414265948038998943955399313469824785904975563819568528174311718357427278839605409924357707005783982572111315760860640799966652810120626547939237849173143985848145249836532758697114651368866392859614484500578227149105345268443580141583719210205095835374335434545472681842951371497572640269058326868615736541215882270559634290513249989259737840685548578504554206173245573145241635327167640213681
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0e8610749e9072982aaef8d8aaf2ed44847e6d34
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.holdmypodcast.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016fe655a01c0000040300463044022031c8a49519a5d446effc074d0477c34fae7bae121458695df28f4b52645d184702202917a1d2ed24077cc809da2a87c369d71e36582cecd5851a8c928d2c38143ea2007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016fe655a01b000004030047304502201fb3c56bb3dc10ea66f67356a606cf47fc2e3cde88dab0cf9bbcd2ac3dd6ae04022100be7b775d7dbcfc664633bc43af9010ef68a9f738f4c9043329d5925d837fa0a5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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