paleobiodb.org
Issued by R3
About this certificate
This digital certificate with serial number 04:28:00:38:e4:87:62:56:e8:d4:04:a9:86:21:b3:d7:8c:71 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=paleobiodb.org
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:28:00:38:e4:87:62:56:e8:d4:04:a9:86:21:b3:d7:8c:71Serial Number (int): 362060733807618229245467370641652232719473
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 18:d3:93:b8:42:fe:75:20:ee:8c:35:a5:90:1a:70:2f:f2:f1:b9:7a
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): af:8f:4c:83:2e:9c:97:aa:0a:2e:e9:7e:0f:13:ca:2a:2d:5d:27:ce
Fingerprint (sha256): 79:bd:d6:26:52:9c:37:10:4b:46:e3:86:7c:96:82:71:c7:5c:3f:1d:ad:47:99:fc:a8:e5:da:92:12:ca:5d:44
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate paleobiodb.org
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for paleobiodb.org
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
paleobiodb.org
www.paleobiodb.org
www.paleobiodb.org
Other certificates including the domain name paleobiodb.org
(limited to 100 certificates)
paleobiodb.org
paleobiodb.org
paleobiodb.org
training.paleobiodb.org
paleobiodb.org
training.paleobiodb.org
training.paleobiodb.org
training.paleobiodb.org
training.paleobiodb.org
paleobiodb.org
training.paleobiodb.org
paleobiodb.org
paleobiodb.org
paleobiodb.org
paleobiodb.org
paleobiodb.org
paleobiodb.org
paleobiodb.org
paleobiodb.org
paleobiodb.org
paleobiodb.org
paleobiodb.org
training.paleobiodb.org
paleobiodb.org
training.paleobiodb.org
paleobiodb.org
paleobiodb.org
training.paleobiodb.org
paleobiodb.org
paleobiodb.org
training.paleobiodb.org
paleobiodb.org
training.paleobiodb.org
training.paleobiodb.org
training.paleobiodb.org
training.paleobiodb.org
paleobiodb.org
training.paleobiodb.org
paleobiodb.org
paleobiodb.org
paleobiodb.org
paleobiodb.org
paleobiodb.org
paleobiodb.org
paleobiodb.org
paleobiodb.org
paleobiodb.org
paleobiodb.org
paleobiodb.org
training.paleobiodb.org
paleobiodb.org
training.paleobiodb.org
paleobiodb.org
paleobiodb.org
training.paleobiodb.org
Certificate
The complete raw certificate details for paleobiodb.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgISBCgAOOSHYlbo1ASphiGz14xxMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzA0MTgwNDA0MjhaFw0yMzA3MTcwNDA0MjdaMBkxFzAVBgNVBAMT DnBhbGVvYmlvZGIub3JnMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA v0qwR/qHotOcEn0bipfwURMYIlP/w4Yz2xnHgWZoqny1UWf7rfs0Q1+aYiHO+ONJ VuC+uiSvzsth9wnPPBI7LxfyRpDgcBC09GxvV9gSWySzBdRZoCm3Lj9dDzEIFNwZ I5AjV8Ws4efj3Js0uTfMWtErs4GLtyVXjvkJd5mzBmbiVhHMVfOZHjVYrRDhX69u IWVrWj74cT19vSisyKzqTvef4hWnYT/TEVXrr8YxCzMXfwbV9lLTJqz+dEiIX0P1 7hKWjH+vQ+cLFUebnpbZKo1aovSPDNiJVQq2Oc3O6pX6BpxZ+W1oliQeekUh5h1z CQCJlmhijKdqcgNq/mxLfQIDAQABo4ICXDCCAlgwDgYDVR0PAQH/BAQDAgWgMB0G A1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1Ud DgQWBBQY05O4Qv51IO6MNaWQGnAv8vG5ejAfBgNVHSMEGDAWgBQULrMXt1hWy65Q CUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGGFWh0dHA6Ly9y My5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmkubGVuY3Iub3Jn LzAtBgNVHREEJjAkgg5wYWxlb2Jpb2RiLm9yZ4ISd3d3LnBhbGVvYmlvZGIub3Jn MEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUH AgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBAwYKKwYBBAHWeQIEAgSB 9ASB8QDvAHUAejKMVNi3LbYg6jjgUh7phBZwMhOFTTvSK8E6V6NS61IAAAGHkr/9 ZQAABAMARjBEAiAM9NbfDxZ0V4tRN9Px0XhzkVDvgWB2g/TG78ucqQv8NgIgKKRl Mk8Zc3L2Um3k4YDlzl7+BMhYsBFjLL08FLs6lJ8AdgDoPtDaPvUGNTLnVyi8iWvJ A9PL0RFr7Otp4Xd9bQa9bgAAAYeSv/1dAAAEAwBHMEUCIGy0pup1IRxwqEyDVhXD 77KamR8u0QhOsCA+yAlaG4uGAiEA4evWytHYmWVlQpUdjY8YV5GbcAKEDUoMYFV3 pzB/GEgwDQYJKoZIhvcNAQELBQADggEBAJ3ZosD6Qp4kv/7PI9B0p4u0FJc+h1SV e7rUj6qYTLj+Nls0IAwRoMaGEKvLakMiVzi2XMiI0Ub/63MfJnY1MjR/s1odqb6N bKTh9OXl4zs1nzVYIY2CV/hRU8TGQOefnDBkLwsoz918fIS6yyMiIIuymlcQuN9d Lu5n6lvJdDrXyE8dCFODJPJaud72vf0AaXtuS98xmW+oUXcxOYHoHGMkRW0Sftqm tbuIMWuwgZ2Gj1CjbJryUfTJpbgAylVpdNTRysKzZ4JRQZySdbKsvVCmU09fIWxb DCfQcZqHXsVKKtv5XY94l/xPvT9RgYfEiYWVG2Nd+Jtp6HUyTuJDN1M= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0qwR/qHotOcEn0bipfw URMYIlP/w4Yz2xnHgWZoqny1UWf7rfs0Q1+aYiHO+ONJVuC+uiSvzsth9wnPPBI7 LxfyRpDgcBC09GxvV9gSWySzBdRZoCm3Lj9dDzEIFNwZI5AjV8Ws4efj3Js0uTfM WtErs4GLtyVXjvkJd5mzBmbiVhHMVfOZHjVYrRDhX69uIWVrWj74cT19vSisyKzq Tvef4hWnYT/TEVXrr8YxCzMXfwbV9lLTJqz+dEiIX0P17hKWjH+vQ+cLFUebnpbZ Ko1aovSPDNiJVQq2Oc3O6pX6BpxZ+W1oliQeekUh5h1zCQCJlmhijKdqcgNq/mxL fQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 362060733807618229245467370641652232719473 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-18 04:04:28 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-17 04:04:27 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'paleobiodb.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24148346569027106352493199718626193921168010891690518945470143718627861907646387037254923646812646286264761210983529758719799985118712143970484387995559501143158341390472860169917172650247085342413310112724286180913224031813448859422442954855002363737553709662881660555392037644897105239138845700850106964274294382408411882680060115746061865365064275343866147447655706048589031993504606319714280389203466516917262985619381549192746798061189759870492707259253657582640082229515105834205910853182045175306281958490166606178772039697503063432985018409761720483558526475815462017761786047007512790005918183232886092352381 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 18d393b842fe7520ee8c35a5901a702ff2f1b97a . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paleobiodb.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paleobiodb.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef0075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018792bffd65000004030046304402200cf4d6df0f1674578b5137d3f1d178739150ef81607683f4c6efcb9ca90bfc36022028a465324f197372f6526de4e180e5ce5efe04c858b011632cbd3c14bb3a949f007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018792bffd5d000004030047304502206cb4a6ea75211c70a84c835615c3efb29a991f2ed1084eb0203ec8095a1b8b86022100e1ebd6cad1d899656542951d8d8f1857919b7002840d4a0c605577a7307f1848 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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