www.muffincapital.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:14:d1:ec:ab:a0:1d:ab:04:67:1d:08:7d:58:ca:0a:61:fc was issued on by Let's Encrypt.

With 16 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.muffincapital.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:14:d1:ec:ab:a0:1d:ab:04:67:1d:08:7d:58:ca:0a:61:fc
Serial Number (int): 268421542647854900885005901778412412494332
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e4:3c:c8:63:f4:2f:a0:7d:f6:7b:99:35:3d:3c:00:e8:3b:2f:12:0c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 33:1c:4a:79:40:5c:05:d0:02:67:61:1d:6b:ec:7c:02:57:d8:9d:dc
Fingerprint (sha256): 80:0a:51:3f:3d:cf:8e:ba:64:8e:55:48:f7:8d:48:44:14:0d:18:69:2d:f7:73:1e:49:08:6f:1b:52:bc:98:00

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.muffincapital.com

16

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.muffincapital.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

durkeenews.com
muffincapital.com
offtheshouldertops.com
pandabasic.com
skirttops.com
thisistheaddress.com
virtualserialports.com
walletvouchers.com
www.durkeenews.com
www.muffincapital.com
www.offtheshouldertops.com
www.pandabasic.com
www.skirttops.com
www.thisistheaddress.com
www.virtualserialports.com
www.walletvouchers.com

Other certificates including the domain name muffincapital.com

(limited to 100 certificates)
www.unoco.com
sni.cloudflaressl.com
www.muffincapital.com
muffincapital.com
muffincapital.com
muffincapital.com
cuahutemoc.com
muffincapital.com
muffincapital.com
shipsterns.com

Certificate

The complete raw certificate details for www.muffincapital.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6A3nUY7BQEltwAabDZl
jTQ15hCzN4Aai4JFTKNcTDlqydWFCmvFagj4IB5Ovy5D6HHklQ4ljaVrycQDRZEL
RYlwBpAQxw+Uj5rym0oAzFPkmsO4xXQ6PrIODB39TBB9yA9Dsrue0UMayQQImeYt
UC6yKo28+JK2yBlcoD5RlLTVfKReU2O6+3q78tkcjqZ/goPrGPPe/Slt4HxPpux6
KusUgeFAN2vmdko1dIGTZDNOgIr6GoWK741KQpXO5uyfMe0BwQAfrIbzRyd6sda1
fflp5p3buqt9mGqed4OQiIAeyloEzNjoLypamCB2tau74yJMxEYp+UEpvBx4NcLw
DwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 268421542647854900885005901778412412494332
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-21 03:58:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-19 03:58:19 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.muffincapital.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23685569096051789033757488141084046938571689067018703720204417418447145732840745291957995888530955983521005634519435552472249980025247806992976788834409233293929436513501688243451649159607859213093652323041603513578849282371177617206111942342284541050150739527694020793056338105830259167096528072074801271054950568989013362272104170133459160153337501613798738648942921272750591559998478968963771576647173973732144035325303364763391924638397798238312432135776568354384086330308087948197291297153656588140420773216207079304064750699465997073960455811057167296765503307065874003338540764836465577350996753113995429474319
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e43cc863f42fa07df67b99353d3c00e83b2f120c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (348 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'durkeenews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'muffincapital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offtheshouldertops.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pandabasic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skirttops.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thisistheaddress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'virtualserialports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'walletvouchers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.durkeenews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.muffincapital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.offtheshouldertops.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pandabasic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.skirttops.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thisistheaddress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.virtualserialports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.walletvouchers.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016decae2820000004030048304602210080426f0d0075594d32266da94b0abefa0c868ef4565e8963b5cfbd0cce4ad3ea022100e91114c575433d9ed448d6cc35d84f631fef8212cf9ac959ae1d96cf1b6d29550075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016decae296f0000040300463044022048c05ab643038eac65af41cd4ae05ec22ac88b376faa5f7eaa7701ae1b45fd3b022008612be695f0eafa87b2ac7d01b4a50b3e507596cfec7dab69cc351d9de997ce
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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