dna-index.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:f1:b6:5e:67:d5:da:44:f9:1b:34:6a:a8:5e:77:71:9a:61 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=dna-index.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:f1:b6:5e:67:d5:da:44:f9:1b:34:6a:a8:5e:77:71:9a:61Serial Number (int): 343587317900395805504338791584930724944481
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 5a:8b:88:6a:cc:7e:49:23:ca:f9:11:c7:7e:bf:1d:70:59:95:07:ec
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): ba:0c:24:a5:c3:52:f1:8d:c4:67:7c:15:a2:91:ad:4c:fb:35:6c:b2
Fingerprint (sha256): 85:f6:d4:a0:5e:25:21:83:81:b3:7b:71:c6:84:72:20:14:5d:73:21:f3:47:76:52:24:eb:d8:bf:6d:2c:32:da
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate dna-index.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for dna-index.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
dna-index.com
www.dna-index.com
www.dna-index.com
Other certificates including the domain name dna-index.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for dna-index.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGZTCCBU2gAwIBAgISA/G2XmfV2kT5GzRqqF53cZphMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA4MDgwMzU0MjVaFw0x OTExMDYwMzU0MjVaMBgxFjAUBgNVBAMTDWRuYS1pbmRleC5jb20wggIiMA0GCSqG SIb3DQEBAQUAA4ICDwAwggIKAoICAQDRzupVFQ7nDHXfGHENb+PkcvJKJXlqSE2K 5oMHxicd/ZobLv84D5CQzZSK36Y7YrVEs+TafRQ7uh8ZvW+cGj1RZyAvotlKYMsy LnfpOU+WYuuF/FavM6aI+XL54lWB+SlAp5klSwleg0J6IpXTl40ZFwYHY6uHHy0V 91MHsUvTT3NWweidcoOKLOGZxfCyokVraqJx/UNPOrSoCG8ai9t2T3hMULzYyKag +6jiPJ+sU9CoJG8FcWXbCiwAHI/GwVLlLKSoSXMTaps8RoVueAgXfo05GlJ2KB25 BeU15pBOZV5hj4A6s1a61jK49hZPLBwiiPj4KYUuplnSf/+4xJsRiFxhANL3p2Nx q86y3AIVl1gqi0Zhcv9R23eWHJSXYGBDxJpVBaZhn3OQj5l7HZEBgqVdcdTNIp53 cMqRf91yL370JkWDD5fhey0ZH6GhciHtSi5SngnWWRwOLgqOgyxv2Fhzhd0BSzfM +JQu4/O0yK7T0acsDqG18OooOGfjyriUaNaHaev8EXHm4ONyS9+WElIWvbFMaCsB fnv1gjxDJwLj/ua/6ioCffJ+J7bv19/q5DY0AcZyNGWK41fWYTy1qPCAN4i4/xu8 RMJg61UCE2gNbFTyC/PTUqaHHr+Rl9TN3bv9CMzF2RMeV2ReTpBsOfJj+ByipvI/ QoFkcib8nwIDAQABo4ICdTCCAnEwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQG CCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBRai4hq zH5JI8r5Ecd+vx1wWZUH7DAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86js oTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14 My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14 My5sZXRzZW5jcnlwdC5vcmcvMCsGA1UdEQQkMCKCDWRuYS1pbmRleC5jb22CEXd3 dy5kbmEtaW5kZXguY29tMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8T AQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIB BAYKKwYBBAHWeQIEAgSB9QSB8gDwAHYAb1N2rDHwMRnYmQCkURX/dxUcEdkCwQAp Bo2yCJo32RMAAAFsb5P93wAABAMARzBFAiEA14SGdwl/qjPR+fkW1lcVmF+EJUqE SzW9eBp5h8EKKRQCIDyB1X+zRif7TreMD0nWpyrdvVH28PATkwAr2TWCv9iUAHYA KTxRllTIOWW6qlD8WAfUt2+/WHopctykwwz05UVH9HgAAAFsb5P8QQAABAMARzBF AiBQYxQPWD1xjCrE+AtFnJojFPfzSqgvc5WR5opV/CQwpQIhAPcxQxhpMeUO7ar8 W5tvxQCeMlfuALZPvzAS2fRb8M12MA0GCSqGSIb3DQEBCwUAA4IBAQAYPZOr/ZCK RRlA4uz6UIczBjRhDcU1wnYGklDafYT9ApDKLIF1WRuY3gMqssrMwQhUzXTsLl/n VYWBC/nPsytaMxRETUj2XlpuJiwKpW4st1/YljRE1qoNhHnx9Azx7vCjgZMvWvNs NDbOEDdB9F2ffuJUkCzarIa9t2ael5HgTUGVMzXKiuniTuP80UMz76XIanyB3OYd 74K2UAqJSWQ6fF0Wx+ovImvSWL7u1F0zl4M3Vvb8wIC3bnICZ9Uwa4wQ1uSSN2/m XuVMmvirN+Z9ApVJKPHaD6TEgIP7OnXxOO9LWUdh22DojNEdwq0d8aDl5hF61WT0 x9McONf0ZF30 -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA0c7qVRUO5wx13xhxDW/j 5HLySiV5akhNiuaDB8YnHf2aGy7/OA+QkM2Uit+mO2K1RLPk2n0UO7ofGb1vnBo9 UWcgL6LZSmDLMi536TlPlmLrhfxWrzOmiPly+eJVgfkpQKeZJUsJXoNCeiKV05eN GRcGB2Orhx8tFfdTB7FL009zVsHonXKDiizhmcXwsqJFa2qicf1DTzq0qAhvGovb dk94TFC82MimoPuo4jyfrFPQqCRvBXFl2wosAByPxsFS5SykqElzE2qbPEaFbngI F36NORpSdigduQXlNeaQTmVeYY+AOrNWutYyuPYWTywcIoj4+CmFLqZZ0n//uMSb EYhcYQDS96djcavOstwCFZdYKotGYXL/Udt3lhyUl2BgQ8SaVQWmYZ9zkI+Zex2R AYKlXXHUzSKed3DKkX/dci9+9CZFgw+X4XstGR+hoXIh7UouUp4J1lkcDi4KjoMs b9hYc4XdAUs3zPiULuPztMiu09GnLA6htfDqKDhn48q4lGjWh2nr/BFx5uDjckvf lhJSFr2xTGgrAX579YI8QycC4/7mv+oqAn3yfie279ff6uQ2NAHGcjRliuNX1mE8 tajwgDeIuP8bvETCYOtVAhNoDWxU8gvz01Kmhx6/kZfUzd27/QjMxdkTHldkXk6Q bDnyY/gcoqbyP0KBZHIm/J8CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 343587317900395805504338791584930724944481 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-08 03:54:25 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-06 03:54:25 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dna-index.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 855943036091499940239116408742594169032112330463471350589843805458017197519288366795006371545590131277356565679300501241972802588462132040833284986925524609960474760621642983380904443245228474051397323615027117812751874248157218820718803421995166106753588772530623148924044931494375423878344431025864044012036599069986146821618238554793160027864313430888437891120242671887556906633260005641224564281116467488828602706799236477440011885325792213750095854996872374545711089748718879899100992044034762320248299875198485506553367809263854900077397171592703769410927550075209297149960242940947671432744017534350393126379162186093510180436445146534898579241024980076345244348657605074356443072569112516704827086199694866108238540613587514496946165896063503377127062287789477185123495559551214941154495327382258717244002841934996431678583964385311205844782897863007916979806650517665996798642644636678860498210741458735471433588350747230181255367176982973738526541187630390758359742415199908745777572717850352006352824647576355992011272664951860273003319796636883633210490498121706781444310331650541598060966032391622120266058312817890817921866622158077325347272764518242209328689328728272880129915214198632675129985720892811240771267525791 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 5a8b886acc7e4923caf911c77ebf1d70599507ec . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dna-index.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dna-index.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f00076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016c6f93fddf0000040300473045022100d7848677097faa33d1f9f916d65715985f84254a844b35bd781a7987c10a291402203c81d57fb34627fb4eb78c0f49d6a72addbd51f6f0f01393002bd93582bfd894007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016c6f93fc41000004030047304502205063140f583d718c2ac4f80b459c9a2314f7f34aa82f739591e68a55fc2430a5022100f73143186931e50eedaafc5b9b6fc5009e3257ee00b64fbf3012d9f45bf0cd76 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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