indiedj.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:d2:3a:3a:97:41:40:b3:8c:50:72:b0:a5:60:0d:82:ed:d9 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=indiedj.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d2:3a:3a:97:41:40:b3:8c:50:72:b0:a5:60:0d:82:ed:d9
Serial Number (int): 332873554293464842223606246123983905943001
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: db:eb:66:d6:8e:44:1d:fa:07:cd:ea:e1:36:00:90:65:a7:58:2b:4e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): a4:e2:d8:c0:48:99:0d:53:07:b2:da:1a:06:a4:40:e0:c0:5a:5a:9e
Fingerprint (sha256): 7c:31:e6:08:d0:09:ab:31:b8:e7:34:76:68:8a:5e:c7:75:e0:69:d6:cf:c1:5f:65:3b:d4:72:36:a8:46:23:ba

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate indiedj.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for indiedj.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

indiedj.com

Other certificates including the domain name indiedj.com

(limited to 100 certificates)
ptmarketinglab.com
gofr.org
indiedj.com
www.lifemanagementcoaches.com
www.indiedj.com
www.indiedj.com
indiedj.com
indiedj.com
www.indiedj.com
indiedj.com
telescopingrod.com
www.indiedj.com

Certificate

The complete raw certificate details for indiedj.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA7NlYi7cDLHFi5+mJsJex
yHJ1p1ZQCxu+3N/ETfHL4LWb5fYtQhbQ5wm8DR6Qs/MgiMmJb8Z98oU0m9WosU72
rfa7pjp3BxY6fLoUGBz1lBBHp7TbVwmh3KxtOyqGvHNrlRyBSNthCP89xQ8lMXPD
OvBH+7oUxPvPWqNmTRVyXMc8RC6bQGXa4Nuk/8WknAFBQjQzNxi+mXn5Fzy8xBBA
gL2XNcP8xlQVPmD61yjRn/FzBEBUf2zMYGHOJNb2El+FoSv/PsVgNHtYx57FA1pg
QkABmGKFyjIflOv9wgbqfEQbDrwOA2j/VYDHaAsrCreLsHHeoxZcm63gYrmrPwXq
IqFvIeDKBu/6oS0yiwO7JuQbdOcVRvrI8/6wgV6tdjUvoEbRl8n8CfPlAPeUFt0Z
DGtl4TRk8qQZNhhLQ8TjLfWhhVselXNkcPovBfuCIv9YnW43ihz8VsLV+XywOHnn
XTF5cUjb5sYCVbHnBlfMFdCVZNyB10ikPEmTLuXBJahSDBYXMkeRgECptt9Kq3bM
gNo4aYTVjWL/5ER/67vqgDL0+QjbmNCdW7f49PbVJOc3iVa0prKJ9E/4XUJGJtai
f5hhUzjDBmP2fJPFVPgv7cIUSznL25U1XkFVBpztCFqEO2pVLlMry1Ai/ar5oBKC
PQIHxIV3zx+zG1xIk/GkIYkCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 332873554293464842223606246123983905943001
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-27 23:10:37 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-25 23:10:37 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'indiedj.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 966259647856346158679472153330851295951131742153959156190206507886999284526724940129273232056579385520913865264117382893515888857241298684468394837309510719917038953959122668888761444740862533216329131992384181391595808252483907573848966095619053938819497815189010194438335998277523118597643821695590463314394145729202907958843295088825138072691373541216046117798376520107944666053350213466855610370759022225794436778218186058160004961435486308222934668036549183355132368576793128425186362218800779120823840019532866280707671706215219748264596880712522165060252313265650308722015516836245681963754680579563421867042603161957629702386346284925196212378891949562242035805747120537932396570545778819038362313795170250683991237623783991556066038247229631903599030372365020235205958342986782084614747302554177571365451437042376463061365812285535365527315888632535865847368270341588510567458842143905560595752541665140652940473560381999184342992152288537672906875022082439431490238265167661174820287986343988856173948599764739309140105610027826073868416271237888058799091831170865471694223995743590983628175705833661340455227255873486363904048842565137507552529198275599967302812888927898856291234149268855899522175036768530714349516628361
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							dbeb66d68e441dfa07cdeae136009065a7582b4e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indiedj.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016c35ea349f00000403004730450221008bcb50e56b38170b76338a56cf2e14d10587ad3f7b7ac0f28f967a313eafe590022020f6ca47e864d62c202e087b6d36d9e9cd7c6f83a5c0fba77bf8bbf7aa39c04d0075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016c35ea35940000040300463044022033fc84e341ab4be276304846dfc59eb7911492b148a6d654f6385f4e18f41c9602200b66e5669b6db3e554ae6bba17d0d57bb667c39a16b12fdbafb95ca38a756e47
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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