www.riversintooceans.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:d2:4e:c3:6d:e1:24:bd:77:07:49:a4:33:5f:72:0e:5b:c8 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.riversintooceans.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d2:4e:c3:6d:e1:24:bd:77:07:49:a4:33:5f:72:0e:5b:c8
Serial Number (int): 332900849358856808869825499314690991217608
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 8d:a9:d7:60:71:9f:57:0c:24:fc:9b:78:7f:21:2c:ee:7e:04:76:a1
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 45:93:4d:af:a2:c8:3c:33:ef:1c:df:0c:ff:e0:f2:c9:86:b7:24:88
Fingerprint (sha256): 82:e0:53:94:69:bb:2b:a6:62:02:4a:05:4e:c6:84:d0:35:de:35:85:f7:cd:03:6e:3a:8a:03:30:8e:84:34:6b

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.riversintooceans.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.riversintooceans.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.riversintooceans.com

Other certificates including the domain name riversintooceans.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.riversintooceans.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 332900849358856808869825499314690991217608
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-26 16:26:33 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-24 16:26:33 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.riversintooceans.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 854238469989901881117695029098166755208758729219445346577954307838846501148404903782483516768452439533630708149348877410832395693151923082408961408032757012651219502863970033120394222809229553830587384939758858447189191412911284391796572317645285551438286690247562602808382090030598928157089172014174107359045779198185519380765497760447868709982076729860032943219250547675951246623267975068820386477382014077198082512340413964505038901583630149973797987400809110019589890462795137648790435989591596186355635413605564661348330029579409254475391699428785089594082441741737874011005817402507584232318690017461740570869727538152132631879901900789717515309152104926399646111926037588974100146027539451456680242880591540230348494086876744639331047264619662164968543851253205511432091487876698179118411744035741205595319602759947923321036253345339423459903900658754070123232294623368899998687275959212258511492606516430963996751700242415635667656801498356487211354964215213768516715745103196871314945968306010098643838095669114666804918486607679055824194422259797835887356434086684743865629416215356929260642409032780697428019663763354864727335006235987981240641090895562186953772979909346959453239870531754176591434379527767961311313002331
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8da9d760719f570c24fc9b787f212cee7e0476a1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.riversintooceans.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016c2f51ea1300000403004730450220020bc7c270cf3253f6b149e9e1945cb494f1813f3ed91106aea033c8105aff67022100ce7220710e1a8bed76be98377c190d976e0fe3d7d35fd8242863a776ebac0cea007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016c2f51ecdf0000040300473045022015f4aa3028bbaa24c15a630ac2e180172faec8514fe9d2042f3d841cfa7c7804022100b73ea140b34fc545b0dd3a9318d237ec8b1b01634998358b5ba5955cfc6152d7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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