paityn.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:e4:63:9a:7e:b9:1e:c0:08:31:f0:89:f0:68:c6:cd:ea:10 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=paityn.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:e4:63:9a:7e:b9:1e:c0:08:31:f0:89:f0:68:c6:cd:ea:10
Serial Number (int): 339053633208803967472394916802008816937488
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 89:d7:20:5c:0b:cf:4b:57:35:02:b1:9d:e3:fd:48:9e:2a:cd:ac:ff
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 3b:bd:92:b0:ed:ad:30:0a:9c:c0:87:55:3f:1c:a8:55:42:86:84:cc
Fingerprint (sha256): 82:d7:19:dd:70:7d:e0:11:8f:2a:e5:45:7e:b2:be:77:4a:f1:49:b5:6b:92:f4:ab:b1:f3:9c:79:78:98:0d:a3

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate paityn.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for paityn.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

paityn.org

Other certificates including the domain name paityn.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for paityn.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 339053633208803967472394916802008816937488
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-24 23:12:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-23 23:12:30 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'paityn.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 738522874252156214328625158339065144875514122021921598726527048087412735736695832648977949577393795128655816676236792610410490984777661291437717999288624826973883732344675160318349229345474074742597011345827624034600724180898832291433104846335662983838190504859010398864351319995329799686929789955001952816833954050848048389666183106705954351436105719103725030298656713338030185611789240587518264348678348053526472073996368854738692316971709652782696669976150585124793202415183128922417529348167456668331273716091727700806126361475790040052194031176647514250551779859014597870083839957664504968869873045627854657329696107971226909833095251269831156189985077868160400921068306620995728311139438130754252772631198275615421349984782333455239491435841530853476062728009468977878118445275707259472865538916131752220195415684695678252855039028506136954560633527862549678556829451635207223793163074005949416759237680187812065957846426160603724601906067324645252491550202268036438201595810004747991781326311967047625945005891120947631564671544576430295765155069764578785754067491076446977763936269175001289150673524337187118462185486456338682575064695034840573117877270555878265505110039151040965918978583959064994143526727867190812532949321
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							89d7205c0bcf4b573502b19de3fd489e2acdacff
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (14 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paityn.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016f3a65d73d00000403004630440220605c492b0c0dc61b12eb836ed18b627cb4226ca171cf3e54521c4b40b73d0a28022033863ce30c20f3e36488745d251e510f00e3fd102e90c03ba59d4e40ec9e21020077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016f3a65d7d70000040300483046022100c8bf0e8bbe53f4277d8dd2056a40b3e903b8164e5ce950aca8d4d7f7484b8dc50221009544db4bbbc458b1cdd54670de4c1684ee3bbf1223e92e377c8ac69c3d99508e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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