blog.puget.tech

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:a2:71:1d:26:d8:7b:f2:e8:51:4e:94:a2:b0:26:4b:53:8a was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=blog.puget.tech

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a2:71:1d:26:d8:7b:f2:e8:51:4e:94:a2:b0:26:4b:53:8a
Serial Number (int): 316612955364488572379767560332901247308682
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ed:f9:8c:c3:ab:1e:78:0f:98:fe:56:80:66:66:62:0c:96:d0:10:51
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 28:d1:f2:4e:a7:78:a9:cc:f7:23:a6:75:31:96:1a:5e:13:1c:d2:ef
Fingerprint (sha256): 7c:db:d2:a6:18:ef:70:cd:da:f1:4f:48:3c:26:1e:9a:ba:55:69:d8:41:7e:8a:c4:3b:3e:c8:97:12:31:1d:fe

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate blog.puget.tech

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for blog.puget.tech

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

blog.puget.tech

Other certificates including the domain name puget.tech

(limited to 100 certificates)

Certificate

The complete raw certificate details for blog.puget.tech in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 316612955364488572379767560332901247308682
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-26 22:47:48 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-24 22:47:48 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'blog.puget.tech'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 959574114374047343715843959092934855909044058148866499989780457588416311562379038037077847235503819499163547665504563653367967692694519227835500152749222842003275063459168855739060860577518935879354322578703039950479400631343816114949371965601635595547952543888746891650463185365622935069014575289925924258702640873331759392258025084856987268981045852296636172101736379807696064789954356100006957068822695224137186450438276639563807202479293293827454920801278004222969261415830329160465600320372559734545423201828391018714423915772874741377551170932305074984375541880367888000161763222347318526333751355781181703455158539768175081907914813942013419161365012442774464512345977750529221366690204701333446172211129215688999988281917391054682858864310184198240413309790727277735845996177237077906648085299262075966109716874540855698726339007706339723058652330068043523140415234798699232448810407000844525771334920598241680794407595626818417367396116456790451551554268489752106802120631863135260383506802236976038381081866630654534852670231409017012351059307208805411523348361744889361014539669844839158654151936299800356919097545180222231867883581558373910354464002821878737682841821438940555371676960589521510527966502742440718230924693
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							edf98cc3ab1e780f98fe56806666620c96d01051
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.puget.tech'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016af68b09c300000403004730450221009e1c6e9360c49ac05a927bc1c55499a06ced75c4be52d7ebf38c0647838ce61002204d06d118a6893dab58f15f7b58c565b81818fcf17603e20fa9aac5a623e79b9d007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016af68b09e60000040300473045022100c7e0d09a5968ced9493cdb7cb16ea88d1b1ad17229bfa6c76a4dbaf758559c62022046d653f2c104ef3bbf804d232a6568ac1daea1ca823e25dab3da08916565323c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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