media.graytvinc.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:9b:57:5f:8f:53:7e:9a:67:21:a5:4d:73:fb:9b:df:48:9f was issued on by Let's Encrypt.

With 34 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=media.graytvinc.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:9b:57:5f:8f:53:7e:9a:67:21:a5:4d:73:fb:9b:df:48:9f
Serial Number (int): 314196763678860742849973026641310860134559
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 0c:b2:bd:f6:b4:71:1d:b6:eb:26:31:89:86:16:8c:e4:58:af:5e:a0
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): bf:c2:0a:bd:54:9f:63:03:ea:8d:19:37:de:5c:53:ed:c8:c6:91:76
Fingerprint (sha256): 7d:3d:7f:78:38:85:59:49:76:5c:83:32:62:2a:da:bb:dc:4d:09:82:04:67:d5:e1:73:86:58:de:ef:49:67:8c

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate media.graytvinc.com

34

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for media.graytvinc.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

gray.ftp.clickability.com
media.graytvinc.com
www.1011now.com
www.13abc.com
www.abc12.com
www.blackhillsfox.com
www.catchitkansas.com
www.cbs7.com
www.gimprojects.com
www.graytvinc.com
www.kalb.com
www.kbtx.com
www.kcrg.com
www.kcwy13.com
www.kevn.com
www.kfyrtv.com
www.kgns.tv
www.kgwn.tv
www.kjct8.com
www.kktv.com
www.kmvt.com
www.knoe.com
www.knopnews2.com
www.kolotv.com
www.kotatv.com
www.ksfy.com
www.ksnblocal4.com
www.kspr.com
www.ktuu.com
www.kwch.com
www.kwqc.com
www.kwtx.com
www.kxii.com
www.ky3.com

Other certificates including the domain name graytvinc.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for media.graytvinc.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtyANd4qTqmdFSmCSPhlo
qF8oK1SuPntEX7X0FB3RvnVWxMJZavH8oUS7GQnrG/b3dxN1xhFeM+Z71u9dUaL4
lKM+668DqOuGDR4eRjsnx9jdbDUH8G9KXZYMNFaTbpj3B0HDq0GWSzSr8o1lpBTv
TyOayjRik7CEHZ3YEf+Kuisd3pR3QemebvzbV3GA1noa4bIPXMxRy5hua5S6vJaN
bf5U6LK5DLcFovZXqSOPD5ytTv1PlFiit6/BOAXNLzy0GJPTqIYqHqU6TA6DG1rb
VWPQ2uZ0sJuat3eD6g8rddK9VA+clb5Nd2d41ImfJvun5M12vo5hlMvHTRoGGo6D
8QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 314196763678860742849973026641310860134559
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-10 19:34:40 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-09 19:34:40 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'media.graytvinc.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23117415537552556989988890989913140281915762026939880428882410171958131063753944212905617959895215272806961676905975901438355602774026983478194518896825048137395835002061111907676837853119802781389827630448007886111195441199663550774128833038388452187180301454067335074550072926898484928636755802572856887659686255141412093082501137569772974095040388307454163995485619617645833865807349368174202518239030843667060296833523997166988838621140195119699770476933881983203568356991563958224127342920496100191843887746444005847194481277217038643053932936513079083689321731510118304313985567901159458571251006426551153492977
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0cb2bdf6b4711db6eb26318986168ce458af5ea0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (552 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gray.ftp.clickability.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.graytvinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.1011now.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.13abc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.abc12.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blackhillsfox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.catchitkansas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbs7.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gimprojects.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.graytvinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kalb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kbtx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kcrg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kcwy13.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kevn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kfyrtv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kgns.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kgwn.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kjct8.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kktv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kmvt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.knoe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.knopnews2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kolotv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kotatv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ksfy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ksnblocal4.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kspr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ktuu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kwch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kwqc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kwtx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kxii.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ky3.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016d1ce2ac790000040300473045022100957f6f62ff9829ec9e6df431e6b6f7e60de2cba36973c112da8a74392982432602203328088b4a2c103de4f291df614d5f1dea58669dbd44023ef0e66cbb217581440075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016d1ce2ad14000004030046304402205eefec8132a5576c51a9d52da4cba1386c797f6f0aa2561fe4dd2fa8b29552ce02206597f2ca095eac545530341168bd9e24448f3f4dda9e05103e134fb5154086d9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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