dna-index.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:f1:b6:5e:67:d5:da:44:f9:1b:34:6a:a8:5e:77:71:9a:61 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=dna-index.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f1:b6:5e:67:d5:da:44:f9:1b:34:6a:a8:5e:77:71:9a:61
Serial Number (int): 343587317900395805504338791584930724944481
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 5a:8b:88:6a:cc:7e:49:23:ca:f9:11:c7:7e:bf:1d:70:59:95:07:ec
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ba:0c:24:a5:c3:52:f1:8d:c4:67:7c:15:a2:91:ad:4c:fb:35:6c:b2
Fingerprint (sha256): 85:f6:d4:a0:5e:25:21:83:81:b3:7b:71:c6:84:72:20:14:5d:73:21:f3:47:76:52:24:eb:d8:bf:6d:2c:32:da

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate dna-index.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dna-index.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dna-index.com
www.dna-index.com

Other certificates including the domain name dna-index.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for dna-index.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 343587317900395805504338791584930724944481
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-08 03:54:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-06 03:54:25 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dna-index.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 855943036091499940239116408742594169032112330463471350589843805458017197519288366795006371545590131277356565679300501241972802588462132040833284986925524609960474760621642983380904443245228474051397323615027117812751874248157218820718803421995166106753588772530623148924044931494375423878344431025864044012036599069986146821618238554793160027864313430888437891120242671887556906633260005641224564281116467488828602706799236477440011885325792213750095854996872374545711089748718879899100992044034762320248299875198485506553367809263854900077397171592703769410927550075209297149960242940947671432744017534350393126379162186093510180436445146534898579241024980076345244348657605074356443072569112516704827086199694866108238540613587514496946165896063503377127062287789477185123495559551214941154495327382258717244002841934996431678583964385311205844782897863007916979806650517665996798642644636678860498210741458735471433588350747230181255367176982973738526541187630390758359742415199908745777572717850352006352824647576355992011272664951860273003319796636883633210490498121706781444310331650541598060966032391622120266058312817890817921866622158077325347272764518242209328689328728272880129915214198632675129985720892811240771267525791
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5a8b886acc7e4923caf911c77ebf1d70599507ec
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dna-index.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dna-index.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016c6f93fddf0000040300473045022100d7848677097faa33d1f9f916d65715985f84254a844b35bd781a7987c10a291402203c81d57fb34627fb4eb78c0f49d6a72addbd51f6f0f01393002bd93582bfd894007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016c6f93fc41000004030047304502205063140f583d718c2ac4f80b459c9a2314f7f34aa82f739591e68a55fc2430a5022100f73143186931e50eedaafc5b9b6fc5009e3257ee00b64fbf3012d9f45bf0cd76
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00183d93abfd908a451940e2ecfa5087330634610dc535c276069250da7d84fd0290ca2c8175591b98de032ab2caccc10854cd74ec2e5fe75585810bf9cfb32b5a3314444d48f65e5a6e262c0aa56e2cb75fd8963444d6aa0d8479f1f40cf1eef0a381932f5af36c3436ce103741f45d9f7ee254902cdaac86bdb7669e9791e04d41953335ca8ae9e24ee3fcd14333efa5c86a7c81dce61def82b6500a8949643a7c5d16c7ea2f226bd258beeed45d3397833756f6fcc080b76e720267d5306b8c10d6e492376fe65ee54c9af8ab37e67d02954928f1da0fa4c48083fb3a75f138ef4b594761db60e88cd11dc2ad1df1a0e5e6117ad564f4c7d31c38d7f4645df4