www.collectiblefossils.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:88:e4:67:74:d8:f3:63:e0:21:da:2f:2b:b7:96:fb:19:4d was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.collectiblefossils.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:88:e4:67:74:d8:f3:63:e0:21:da:2f:2b:b7:96:fb:19:4d
Serial Number (int): 395031146787852130249934502619916642490701
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: a6:16:54:3f:64:a9:2b:6b:fe:c4:ba:05:f4:cc:fb:8a:59:08:c5:55
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 38:d9:a3:f0:54:9b:7c:ab:8b:17:d9:fe:db:59:45:ec:7f:2e:cc:07
Fingerprint (sha256): 73:d5:f0:86:97:15:7c:3f:ab:fe:1f:b7:67:d8:c8:a6:60:42:ae:bc:8c:3d:2c:64:76:1c:f1:2f:e9:1b:d3:7c

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.collectiblefossils.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.collectiblefossils.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.collectiblefossils.com

Other certificates including the domain name collectiblefossils.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.collectiblefossils.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 395031146787852130249934502619916642490701
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-26 19:09:10 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-26 19:09:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.collectiblefossils.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 918357889509845351804282405279124826743350244098962772976165854768923325404778212531249607412891998822648223980217055352446387594839383500955007745231216561754158993769541407915481466059683671202629716975988054484656768795457262652637722392143738245062257817436290521026027842476713314345408691108875794017761931438254508563986331401022894446053283324797462952118002772278869928263958725574771202855869488522788798938949130646047390316292225357434971952939919629081380882258080506475717019195753971895244046450383958933733508427258237878180847011279674819222743464606086993666665361863019956297228236095214056963320804822163404353534089685022729806568932926547648390075902925181057469017581840493933256987073738363674802511110202358644867109746764662680301935293082808250152751902794516238711867010687306276425508745407722746575946891365921522666914981658945669655084117816353580692471001257994718154580536614477348552931112912020411491772151933407057899283225581304131934524624046172997310371269367134936101149796351203060673679265618869498624221295822095485476799916712716386563116346366686638025151708963232683737512906455257604889379077014460587804749153505026863747848741753853311383582566310893262724686875610011216429891971631
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a616543f64a92b6bfec4ba05f4ccfb8a5908c555
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.collectiblefossils.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000170831e12890000040300473045022100bf47ed2bd9995777befa0bfdb56058953113fd975941b385ab10767d8c23726d02203d3cf5197f6554666d1aa11ef92ed660b808ae7b70031b9670c15fb73d1cc5a30075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000170831e12bd000004030046304402205f4bfd7c53aa27d915b22a31a25ed156d3fb09682408e571c4e6aa13ee28fea8022046a8527fe961f6a33a93d85ab0c9ff9c5c1e184c718141aff5f54e5043e92262
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0099fe8532f1bdc3d61d73a014c97a898279d91f6abbdd71576b4baec2977fb6f39d322a1ff49a07b698a9b9a5667a4a9bf41e272e63054d0b10e260ef615a2992d317f0f610b15abc569b618207ab232ce2f57285de28356982b9102abbbe1b429567c90133e5936b019684dfc2740eb6232b65daa56fccb3cfe44f3884bad1c64f5a239437b5858d5ef3d8c134977c74922dbda15f7bfe8ee270f2fff3a7ad14cff1f573f6f47c3a636eb5b1c137ed9879641ee4ac2299fd87017bcec00e36ea347ed89c801327211331552d913d1f6ae8b123247405226d399e8f20355d03dcd20e41907a6b5b131f8bf2f38c805e5050feb24112c5bb20024dcd6d38417ee4