avoidingmistakes.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:5c:24:d3:5e:58:99:fa:9d:54:f9:5c:29:cd:1d:79:d8:d9 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=avoidingmistakes.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:5c:24:d3:5e:58:99:fa:9d:54:f9:5c:29:cd:1d:79:d8:d9Serial Number (int): 292691785248058721624005202987598418139353
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: a7:09:fb:91:4a:0d:b0:b3:d3:8b:45:ab:de:ab:21:09:93:2f:cb:21
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 98:15:87:9c:e0:06:5f:69:fc:2b:61:f7:c4:54:fa:fb:42:64:98:4e
Fingerprint (sha256): 8a:e4:87:d3:f4:75:ff:e4:7f:52:ff:e9:e0:1d:c9:12:a1:90:8e:d2:e6:03:cd:63:97:f5:d8:d2:5e:c7:9e:66
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate avoidingmistakes.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for avoidingmistakes.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
avoidingmistakes.com
Other certificates including the domain name avoidingmistakes.com
(limited to 100 certificates)
www.metalstools.com
avoidingmistakes.com
alertradio.com
www.avoidingmistakes.com
35701.com
www.sacramentostemcelldoctors.com
www.avoidingmistakes.com
www.industriepartner.com
avoidingmistakes.com
avoidingmistakes.com
www.oushakrugs.com
www.avoidingmistakes.com
www.avoidingmistakes.com
avoidingmistakes.com
labrotties.com
webuycarshere.org
avoidingmistakes.com
alertradio.com
www.avoidingmistakes.com
35701.com
www.sacramentostemcelldoctors.com
www.avoidingmistakes.com
www.industriepartner.com
avoidingmistakes.com
avoidingmistakes.com
www.oushakrugs.com
www.avoidingmistakes.com
www.avoidingmistakes.com
avoidingmistakes.com
labrotties.com
webuycarshere.org
Certificate
The complete raw certificate details for avoidingmistakes.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGXzCCBUegAwIBAgISA1wk015YmfqdVPlcKc0dedjZMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAyMjMyMzI5NDNaFw0y MDA1MjMyMzI5NDNaMB8xHTAbBgNVBAMTFGF2b2lkaW5nbWlzdGFrZXMuY29tMIIC IjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA7T29mjz71a7fE9PDNDI+qKH/ JqDfGQWgGZ4Xgxv5aPKNdB42qXeXpFt3RGz4e8m2zR7zsQ6zqNzqAv8ooXmCcfjf 6Eupnl+KEGHi3HoT+agAHz0LI1lZ3U+Pgb5WHJuqGU/fT94TWCnsPzFMFQCzbR5k cObpQ4E8BaLyP2l2H4KA5Izfi2h4e2b5sp6UzIAkqxrcK3CE5O4MEnUeDL9pUmDC 6GP2Suvq2XW4sHoDQc7fwFLX30zYN25jUGuf4HENzqZDTVq3tHgzjq/2zTwIFf/K eBbQ84BxBMiYW/zk4TSy3V/dJ1icQb9s/2f/yQqJ1eMpFQFR0SAWf57L4BpJIEuT j76nBQMdobpgnOzco8H6304cEZ8ZwqlnWfB57eOi61r2t1L2T+roQIhw6we+6F+B AkSSPDGYs600/0kozU13rNLabtCB26N8dT9PQrosbZ+/NqdDSEAWxD5wlb6r5nxn UOc7v1DsYgDrM6NAZoj9jS8mEiPoMc6l5nXoBdGB6UyLjpFgvQJITArV7+NuSvoS q9LO3OmxCJKC/xySECqak+HI6+q5ZYbckn56WzVdK30aUVnxyZxlScGybHNSDO6v wp0t5fUxc45MGONBa2cBNQJjzT5fJk3iJnzDxkGHxcxZn6Z31EUOhwL2L0uTAuLo D5c3hWiqQH/qIs3WiwECAwEAAaOCAmgwggJkMA4GA1UdDwEB/wQEAwIFoDAdBgNV HSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4E FgQUpwn7kUoNsLPTi0Wr3qshCZMvyyEwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3 pkVl7/Oo7KEwbwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2Nz cC5pbnQteDMubGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2Vy dC5pbnQteDMubGV0c2VuY3J5cHQub3JnLzAfBgNVHREEGDAWghRhdm9pZGluZ21p c3Rha2VzLmNvbTBMBgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAo MCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQMGCisG AQQB1nkCBAIEgfQEgfEA7wB2APCVpFnyANGCQBAtL5OIjq1L/h1H45nh0DSmsKiq jrJzAAABcHSZiGcAAAQDAEcwRQIgW8Dfuq6bbt/Lq/EOngO6w6Y5Yn45bLPICNKT 7HM3j7MCIQCYOhh5N7X7arM5+oDWzdwTSrVYTzHg97TO469Ecj3sXQB1ALIeBcyL os2KIE6HZvkruYolIGdr2vpw57JJUy3vi5BeAAABcHSZiFwAAAQDAEYwRAIhAK07 wbm6D7O2sPht6pMLYY4cNK0ZtJa1Zgg7KTeRfcQHAh8CJV6ZRdsS6jZmRS/gyQfG FaRUv5PxELB/wmPSaBhWMA0GCSqGSIb3DQEBCwUAA4IBAQCWAoSPbuOQs1Pcyn6t cby8n0iLxu5wt6KRzwzWOy3vDGlYNyygQ7r2lb6YB0AclHJw9fRKttmEusEVySWq ZgI5fusTaCMFhiCChm4MMSaTUZxFHZAHFoP03fj5/MniE77RB0O53iARed89RQR/ KqkrSX7qjoHaS+K1FMN74tWSwcoOa+DrtZJ6QtIOiJ0aWt/Wx9upqTYbd19Ve6KN +xNvrf5/hwiwGqyQL3Fa49NFxMinP/jKUItm3kc+KL9xWzUM/v9B1cQJDj0v7o4O NRuddOQvqJkx2qVKz3CqEJX1TOKUVoSPISm8aIYEkoEiM8uBW93/zel2VzgOBY8x Fvb3 -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA7T29mjz71a7fE9PDNDI+ qKH/JqDfGQWgGZ4Xgxv5aPKNdB42qXeXpFt3RGz4e8m2zR7zsQ6zqNzqAv8ooXmC cfjf6Eupnl+KEGHi3HoT+agAHz0LI1lZ3U+Pgb5WHJuqGU/fT94TWCnsPzFMFQCz bR5kcObpQ4E8BaLyP2l2H4KA5Izfi2h4e2b5sp6UzIAkqxrcK3CE5O4MEnUeDL9p UmDC6GP2Suvq2XW4sHoDQc7fwFLX30zYN25jUGuf4HENzqZDTVq3tHgzjq/2zTwI Ff/KeBbQ84BxBMiYW/zk4TSy3V/dJ1icQb9s/2f/yQqJ1eMpFQFR0SAWf57L4BpJ IEuTj76nBQMdobpgnOzco8H6304cEZ8ZwqlnWfB57eOi61r2t1L2T+roQIhw6we+ 6F+BAkSSPDGYs600/0kozU13rNLabtCB26N8dT9PQrosbZ+/NqdDSEAWxD5wlb6r 5nxnUOc7v1DsYgDrM6NAZoj9jS8mEiPoMc6l5nXoBdGB6UyLjpFgvQJITArV7+Nu SvoSq9LO3OmxCJKC/xySECqak+HI6+q5ZYbckn56WzVdK30aUVnxyZxlScGybHNS DO6vwp0t5fUxc45MGONBa2cBNQJjzT5fJk3iJnzDxkGHxcxZn6Z31EUOhwL2L0uT AuLoD5c3hWiqQH/qIs3WiwECAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 292691785248058721624005202987598418139353 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-23 23:29:43 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-23 23:29:43 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'avoidingmistakes.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 967859549645248335697169002056810669416502235927749127023286880407936958098336167515190623248521463473143292190334013185350320899326803043102121131042934084223301180813629583375228696862622097627833760502366331920351588309501723971617898157143158425595051083348458691701497744400383817167452414345555869363744434376578388662368575183983143641961287091733521045740384333656041065955943253427591129693722764832663412633369628455660593259998573470653828848570005358025194354017452584835492985094276409488396595816560649142279850275667216524285048812144982133750627955449291055581013125820152754946415822767936982519183500639807210835427930283354557226796204524980423282408767170635166740864835080245330237740065661802292211814285907527233636587276816377638212951327511678020419737175171101256846581432438265036560454068385766132233482622243857629063575577872544613611077904745300822061355166959384910194090103737107189611697875251698903675987846781289670749652104692769544086672052083813613812587663189863977916596748139489845004300740206850295693881242903041818845947409270566883271047114315739252414776461371914715399273731857036132128155628263666339042937136491915442130758805620823595068782440695706543454664511105517063197081111297 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) a709fb914a0db0b3d38b45abdeab2109932fcb21 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avoidingmistakes.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000017074998867000004030047304502205bc0dfbaae9b6edfcbabf10e9e03bac3a639627e396cb3c808d293ec73378fb3022100983a187937b5fb6ab339fa80d6cddc134ab5584f31e0f7b4cee3af44723dec5d007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e000001707499885c0000040300463044022100ad3bc1b9ba0fb3b6b0f86dea930b618e1c34ad19b496b566083b2937917dc407021f02255e9945db12ea3666452fe0c907c615a454bf93f110b07fc263d2681856 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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