notvalid.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:c9:e2:59:e7:2a:6b:ad:32:f5:35:6d:95:63:93:13:30:10 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=notvalid.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c9:e2:59:e7:2a:6b:ad:32:f5:35:6d:95:63:93:13:30:10
Serial Number (int): 330034485876454697232939467914177198370832
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ff:a2:01:71:63:b8:f2:e7:d1:94:0b:5f:44:55:42:fd:3d:27:4f:b2
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 48:0c:0b:9b:ca:04:d7:15:76:50:b1:ba:79:c8:9a:2e:6d:e1:8e:b3
Fingerprint (sha256): 72:38:5b:48:41:ad:fb:1d:36:e7:c6:72:8e:26:c3:91:6e:fe:9c:0d:a2:bf:28:be:d5:cd:ae:d8:30:49:b3:f0

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate notvalid.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for notvalid.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

notvalid.com

Other certificates including the domain name notvalid.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for notvalid.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEArtW959EVLgjZieagrL+3
2zJXVDhrqB8F8phGmLGZgvwiD6KGk+g6qkob86E89puHck7uyVR2ZlPrzgzdj1hG
f/vwQDaX+WGBofbJ7rTdPbsYLlxTjWINS4R5K6/3Y54YSFoVVwINJZdgbUNoXvcX
fhEUjukyWNvh2/TrGYxbUNfQTj1ptk0F+BhKE9wEDXf50FsAflkMNDcvGVMggFsE
OTu7e6B+46BUMDOeQvnrYBHJgYV0VkMWfpxE4JC+8gFWzf8YObbgu2j3W3f9Gi5C
3KvQ3mR3Ol53JSkKI2D9GQXkE0pk2P5/mmcy4Cv7KTSxhXkuiwntc8mlXm12ONna
bhg+sWo71YuIw2eAg6azL/2hZXbMdy8dndJIK45XTlF4kv9BnrRGfGgpO1WcRVmh
tof6BGQlDVk1hoDK117tMPMy73QfhufIdVTN6MtvkJ8j4llhOvhqag/6Ns71VxeD
PDQ8uiiy85vwQhoR+1t7/fOvGX5UIrbmkPFJKkve41M8FOVc7ib3507xyJCqgmnL
C3JeEqXQ47IsEdcMpNRSg8yCn1LkTDGddGaFrfe8wQtzkjtf0doRYKl80jaGnROO
/wkAwwrkznKtYXt+f8o/SXapCBBomZ/glUy5lzCu3ijap6XTIMDSZwAg7eYmUTrW
pfV3flY9fMZcvjlWjupLsKsCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 330034485876454697232939467914177198370832
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-03 17:46:56 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-03 17:46:56 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'notvalid.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 713264280889803150436684405379702643386478162206967474620193161760445428098486813665064589981078585681073135857133084831816675381883052588271600004800906064232388525981742778107448275046049294333220928184044818912560288598344060240298027144752774513200888308204356035185595915086994713801633535037023417383579648843494022869874942724184161511937134590627604427065165185992792926999154450789294792466718928265910065955861978386102542219582314664090249484917551672449867042762950549190799416880487122289083193596874042758640544256919666576250147886226788032999927998695536338496576974947280979101189351506924818038781041121520879543639742933605035496985987239000751815409733253511739221571095927124317435572324174182227765444044229999722773687025603936133417548448998579232728760612517180399807436271675351684756669646268802694350491970538174611588062899399670082805613134535127450463946449809345194638275952845585049387819623783614214543538120850088513328728541073016454483443675012459355543372086222606500531446770507351836653989929144779342070798771162675971685825473750753120766266796607270012151864487256559449535858613506050349893523657522256715295751005111705615099794753353064729548294781515079077268686179139571495241008263339
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ffa2017163b8f2e7d1940b5f445542fd3d274fb2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'notvalid.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00075005ea773f9df56c0e7b536487dd049e0327a919a0c84a112128418759681714558000001700c608485000004030046304402206b2170b48eca68322e8c2fc2a612c927e9d93be3af74f75483e97164e3304114022020ec17d9190f526cc739b53451b3d2c6ece2c9528be6d6d336539132807dead800770007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c000001700c6084a90000040300483046022100baf5af70cafad60936c6d04c2dbb2b960ba2d62090956ddc828dd00e81623163022100945695b524d1e012309ea125044acd4cb7061a605649d958c6bc6b8061e990a6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		007a49d2f37ffcdba331f654f0d3b524a1bec3b03f03cc80dcb5dfa54a5f4cbebdbbe4facf1e129aff40743e6266db7199c16de4ecfbc8c38543922a5c29c26bf1621d1d9d4d25cf3df27930c5a7880f66158d98bf5ff677bc8b7c7fe2ae32a3a376d5f8a6282dd1d667a1dbdf40cd302d0617758641935da4fb3ec0429cd9c2ab0ba735710e252149094030f508fb5deb25da34dd9df5416089a571343496973b2b6ad27f7ade5f5882df7c2d00bb59af312c6645675f9b31e1b8187f782aff075833fa37b7acfdf0793590e888fc11980551b5766fac06b329c51e361e5577cc93fc92bd7ac7768bc24640b79b75831fa03a88cba167477d31104cea8434a81a