catherine.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:10:a4:b8:71:e2:98:d4:51:01:5c:ec:da:58:9a:e1:f6:d3 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=catherine.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:10:a4:b8:71:e2:98:d4:51:01:5c:ec:da:58:9a:e1:f6:d3
Serial Number (int): 267000326749811600303891494973063418738387
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 26:cc:27:ba:51:59:74:35:d9:6d:57:8e:fe:9f:e9:85:42:d8:d4:2f
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 15:88:c5:7c:42:b9:8c:3c:35:6f:a9:2a:93:fc:d1:e4:4b:16:4e:04
Fingerprint (sha256): 7e:ed:1f:fb:5c:58:46:59:ec:eb:2c:18:43:3f:90:48:f5:10:e5:b0:e2:3a:f4:f5:89:ae:45:5b:66:11:0c:c6

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate catherine.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for catherine.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

catherine.org

Other certificates including the domain name catherine.org

(limited to 100 certificates)
www.catherine.org
catherine.org
catherine.org
catherine.org
www.catherine.org
catherine.org
www.catherine.org
catherine.org
www.colzen.com
catherine.org
www.catherine.org
insectrepellant.organic
blynews.com
www.catherine.org
catherine.org
champagne.media

Certificate

The complete raw certificate details for catherine.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 267000326749811600303891494973063418738387
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-06 02:18:40 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-06 02:18:40 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'catherine.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 771273746958780895274508908352592147557630520288813145201255814324741631183894393511028938659476027452625972230289629894096705404270594490422228258930671784969499312206298595131586475186202826556391482742631865667872277309159939888726503658582335338751652228433922719108929734279899935629306508228525294137611947116603681103037558836623438473897587170628647674260732724278252000955814286058019572843493150230778335517106316236288417273943859983219348298941844235688374280046158789223095219837507373065209862335238433062505110063791998720380472779154612919570391395752382488743158685439143367296136942555106883764888936848391038121644767449273063983338734702611730698762197652852421863170399668448106800222499936200505654041230282085653661534404557043536220699346841869444550600962428160528826912558615157656265136631813156121787049750978672903500117868984079762325891984178516362673289753377286210651683835622497369781275844213625763794015365313270470004261627101696357420725603175349006868608665178562253205084131825936981870607057033355981343803809281729729001543931527684167006044895933214302236847287293620404520887672703099073982234960745515617356479470392278198921105551863862460699574873665068615197382014106904895593454712213
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							26cc27ba51597435d96d578efe9fe98542d8d42f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catherine.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600e712f2b0377e1a62fb8ec90c6184f1ea7b37cb561d11265bf3e0f34bf241546e000001701881be6700000403004730450220040d8f32375d58ab34ee1d847267130bacca767d4a7e3c6b09b66fa25a0f5c0c022100e10fac9a8003061b78e11fb48d5b96e5694d224e529b69f79093d04928ae6f4d00770007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c000001701881be920000040300483046022100ebec5cc1a7c2334f66e99510690708433eb10ed168f44557f2ed2da60e46828c0221009ec66779f3713e42145905c269b28fedcba28b93a4ec609fe980bdf2e4e947a9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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