deandrea.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:87:9b:ed:c7:e6:53:13:3e:20:e0:38:c7:46:76:96:6d:6b was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=deandrea.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:87:9b:ed:c7:e6:53:13:3e:20:e0:38:c7:46:76:96:6d:6b
Serial Number (int): 394594528229517512892261352797114778152299
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 8b:86:2c:0e:3f:ee:29:26:9f:a2:d1:56:ae:0b:ea:98:81:59:e0:8b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 19:fc:02:11:0e:c3:3e:d1:99:83:12:d6:bc:25:a8:59:c9:a8:d7:4f
Fingerprint (sha256): 7f:98:60:79:44:e1:2c:73:67:36:53:41:41:f0:14:0f:cb:1e:c9:99:d4:c4:bf:11:6a:80:ea:50:88:f2:d6:ec

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate deandrea.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for deandrea.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

deandrea.com

Other certificates including the domain name deandrea.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for deandrea.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA4A+zG/Gd6LJkhfN1nvyE
S7lKJ2kFlrOna5OTg4czoosNgScX52p1/rj3rm8rPpzAW16G9c8QjLGkLBdQ193J
sQKjLGiLVVjxJf1u38qbm6X2Hes7khjPMQw7F+KZSUlMNyQNbZ6uzIh26cJatJ9v
HvCAXm+Tx1/P63CdZw8ewJTdu9WuubCNyStubeEBBTwozznrrf63mfnGz0CMDLG0
cwJKTm78SyQDs1/HUoTUj7qCEjX8gx180II34St5DccuLD+h8N9JxxlGJayMcjjB
8SdYiQtqwhzd09cJDPhcbXgMPorOz0GDtBrolAox3dXwvODkgPQIqfqwK8jE7emf
uZmJpf+WGTDS3I8pO6uRsszVdipUVtyPPhH0PtHM/I6ZIGo13sdIS5yj/EDk1hqv
XxkiA7Ewpo0cIDwPgJKFXVQUK0nHP19SpyxZvbWK5wCwp9NB7QX0avZRNw/psYAQ
XQtBqYYS1g75JenOmEbw55HLV3goEg76QIXxFWZYwsfUdW78NA0tXr9fCCSCOSeL
kI1meUGyZuX88aToiRj2pyKtbIKhbI8VNK4rFYQ7P+gZtQQub7Kh2suI4d+8k+PM
zll2rsKHOTOcRiXcV48Yf7vDl9T7qKgaJjCtzYVlVp+nWoPlFdFzil1l+VGzpLan
Lw1eTTLg0U10y/kfh+s0FqsCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 394594528229517512892261352797114778152299
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-29 19:38:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-28 19:38:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'deandrea.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 914090462502760342419930210455589300754458666258503783024301200742946696891652176284367639403238234019391306351270302341649367616145850772303999815813638926124097387759190743859089401628203815145220964552772641464415507343814232422818871798632051463414819944932198178909617236701062737027918715142106286264419250960156549794312211820432095434126817769442503477372999135436092495316944431687170979919918450882473471769724178219821478246269075892861901156670264969357918831871037289928350742684479774883105399319540067830720490010651646775677053148502053607489112960054878269876088667739973648812467833631560590790871142311266561381088216843129047497876037569225294951098893684761625489078166122935249872762604428158217602106135707764195408076441751308637842868463355510001986696872202450845580702391543778341967678824643903203475389334004098562646470870983945187784912384611335257331652712632481489807711347943348317101664588080439540610877858650319824730878613745794580701233580586689571572423968127187828420493689030385283406706771843385325213728069715221245471883710121592806446843524703639540333025752427085809381958022056760444698270490028240582263531187115226732155031913491091321410713576402882924045029739624573462088724518571
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8b862c0e3fee29269fa2d156ae0bea988159e08b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deandrea.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016d7ebf71ec0000040300473045022100ba1a78ef8a1afed3d267cb05b33f845bf88b5c520cfd84be9d9e10cee47cf844022007dd5ff7a20158858f4f5c94837791ca64a567c4b66deebce70d6bfeb7ef1872007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016d7ebf71e60000040300483046022100c54265c17df00ccf5aff372d143c9a9a660b1999c7320d81dfacf649833b92e50221009c2137ce0f632a79d1924c5b535b7201ab743f154aa3c1a645f422a49b71e0f7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0080fcea84ced5ca07afe716af6f3c57b3c8e95721cd459397f8b99daebbde7defb9a7ab7525642bc5010fed387b41e23efadedc69557d3e40424c48ae04f59d371528a63ba51cd14e910587a2f90953a746cc88502c6d1ce6b69e26249e5bdf8937107bb29be30018fa6ad08ce1ecff90699280b13cbacbd1941356d620e1fd82e7726242ddc126a2257a24499eb65ab4d0f38616b44287647c30689da1d2d38e71e604a4fabb56352d4e0cd9e31f93eeb724e65f52564f4a82c65434199faecf07815e64e48663b214c362909ecb01c341b13e09c2914ce11838751f79d5ffa42c5c65c7b87a316f9dfd56aa00053b5c3e4706f942fc87dd72eccd9b1e09cc67