www.christinahsuholland.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:96:f6:93:95:15:0c:74:31:77:c2:c0:c4:09:09:23:a8:82 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.christinahsuholland.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:96:f6:93:95:15:0c:74:31:77:c2:c0:c4:09:09:23:a8:82
Serial Number (int): 312706969211769480029790149474932431759490
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: bf:55:ab:73:9d:c6:1c:e6:61:40:3a:cd:e7:40:d8:c5:d7:cb:78:5c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): c4:75:97:fa:9c:eb:4a:3a:cf:a2:e3:4d:62:5d:25:c1:05:df:8c:1a
Fingerprint (sha256): 6e:12:d8:1e:6c:31:d1:e5:b2:18:af:f1:1b:05:8c:aa:7d:9f:2b:ae:0f:7c:b6:22:a9:a2:ed:68:22:0e:6c:83

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.christinahsuholland.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.christinahsuholland.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

christinahsuholland.com
www.christinahsuholland.com

Other certificates including the domain name christinahsuholland.com

(limited to 100 certificates)
agenda.bornia.net
www.hippo.com.bo
www.abcmedicinals.com
christinahsuholland.com
christinahsuholland.com
www.shoppio.co
www.neuecoin.com
www.auto-techpro.com
books.initthoughts.com
christinahsuholland.com
mhasol.it
sni229124.cloudflaressl.com
sni229124.cloudflaressl.com
sni229124.cloudflaressl.com
sni229124.cloudflaressl.com
digialchem.monster
api-docs.beyondshop.cloud
sni229124.cloudflaressl.com
sni229124.cloudflaressl.com
sni229124.cloudflaressl.com
sni229124.cloudflaressl.com
sni229124.cloudflaressl.com
sni229124.cloudflaressl.com
api-docs.beyondshop.cloud
www.christinahsuholland.com
01640.tk
app.techtr.ee
www.etlinn.com
audioflashcards.app
sni229124.cloudflaressl.com
www.christinahsuholland.com
jamesrc.dev
sni229124.cloudflaressl.com
www.surveys.aceup.com
christinahsuholland.com
zest.one
www.christinahsuholland.com
christinahsuholland.com
www.christinahsuholland.com
sni229124.cloudflaressl.com
agenda.bornia.net
sni229124.cloudflaressl.com
01640.tk
croissant-project.tk
codemane.com
www.christinahsuholland.com
www.neuecoin.com
mhasol.it
betania-kalender.vitterso.net
gngits.com
tnvet.karla.ai
manage.ceucenergies.com
www.signmyguestbook.net
www.raphaindia.com
www.raphaindia.com
*.christinahsuholland.com
chatwidget.bot
digialchem.monster
www.getpongoholdings.com
private-replies.ideta.io
www.christinahsuholland.com
www.fichaintegrada.com.br
sni229124.cloudflaressl.com
www.teafe.com.br
tmrw.coffee
jamesrc.dev
wbt.gr
sni229124.cloudflaressl.com
www.fichaintegrada.com.br
christinahsuholland.com
*.christinahsuholland.com
tnvet.karla.ai

Certificate

The complete raw certificate details for www.christinahsuholland.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwotgfKOdrPGowypAnaAw
7QOWXcxu7jkd+DFp4yTuMPO1M5JHxn2xUIj+XmEx7/RgEuGVNacozDcahpWpywua
A2m2QVvOj8CBmZvLwn3H9C+sWAHsCBxqRgSKIgtwwYHoh+GtZTwuchshBcgBkGbL
NFdAWMYnoYx+f4aeGXIcohgRipsatL1sZW7iapMaqUYeYLT3tnlX8o17sHRxBkw4
d8VKL/4B+lA1lDS1TyXqCD/m+qxoAhFunNQp11t4xXwOTsKv2CSgvvJbzLakcxec
2tPha0aczeT6WkrbUowlDW6jMzbsQ3s0JWzhkNKHfSXbkDrsgVM8dwD3kVg5dmc7
XwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 312706969211769480029790149474932431759490
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-03-29 23:13:46 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-27 23:13:46 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.christinahsuholland.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24558960475290251712239850159944794802078393765854434617908260558875951140364199181632156411929712423365659478905549876542724415797616049448239733847541265237069700631934920566749279763298886280840479296896334512064713230103988209631584983642378549386321480004485995785986326694832297503890710062952830134941792302664040643191843531808930409344945587584855344566720209994149235149165720117519610510253499100565710698354381677470512826831779865941654314823933550822301417063072673331212426814506262754164343874946604009359316966745182755487929892179091603309203233936147665027129286164195652310588043209769752176573279
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bf55ab739dc61ce661403acde740d8c5d7cb785c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'christinahsuholland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.christinahsuholland.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf64000001627440cc60000004030046304402202225f583efd3680582e1546b30dfd042308acb2b758d3d9dff35be8830e8ff1f0220345ed8704d37930edc8641fe34e9c5205af8d06bfdd77aa44a93891ae2cc27d6007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001627440cc1b00000403004830460221009bb4d44576c22710b2d28ac1f0698aabf0a68511e5f12de3672f4ae3a2e2cd8a022100fe343c2e9640635bf1d3ce782c781bbf2adefd3403bece86ee08265abf159c18
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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