avoidingmistakes.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:5c:24:d3:5e:58:99:fa:9d:54:f9:5c:29:cd:1d:79:d8:d9 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=avoidingmistakes.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:5c:24:d3:5e:58:99:fa:9d:54:f9:5c:29:cd:1d:79:d8:d9
Serial Number (int): 292691785248058721624005202987598418139353
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: a7:09:fb:91:4a:0d:b0:b3:d3:8b:45:ab:de:ab:21:09:93:2f:cb:21
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 98:15:87:9c:e0:06:5f:69:fc:2b:61:f7:c4:54:fa:fb:42:64:98:4e
Fingerprint (sha256): 8a:e4:87:d3:f4:75:ff:e4:7f:52:ff:e9:e0:1d:c9:12:a1:90:8e:d2:e6:03:cd:63:97:f5:d8:d2:5e:c7:9e:66

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate avoidingmistakes.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for avoidingmistakes.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

avoidingmistakes.com

Other certificates including the domain name avoidingmistakes.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for avoidingmistakes.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 292691785248058721624005202987598418139353
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-23 23:29:43 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-23 23:29:43 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'avoidingmistakes.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 967859549645248335697169002056810669416502235927749127023286880407936958098336167515190623248521463473143292190334013185350320899326803043102121131042934084223301180813629583375228696862622097627833760502366331920351588309501723971617898157143158425595051083348458691701497744400383817167452414345555869363744434376578388662368575183983143641961287091733521045740384333656041065955943253427591129693722764832663412633369628455660593259998573470653828848570005358025194354017452584835492985094276409488396595816560649142279850275667216524285048812144982133750627955449291055581013125820152754946415822767936982519183500639807210835427930283354557226796204524980423282408767170635166740864835080245330237740065661802292211814285907527233636587276816377638212951327511678020419737175171101256846581432438265036560454068385766132233482622243857629063575577872544613611077904745300822061355166959384910194090103737107189611697875251698903675987846781289670749652104692769544086672052083813613812587663189863977916596748139489845004300740206850295693881242903041818845947409270566883271047114315739252414776461371914715399273731857036132128155628263666339042937136491915442130758805620823595068782440695706543454664511105517063197081111297
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a709fb914a0db0b3d38b45abdeab2109932fcb21
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avoidingmistakes.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000017074998867000004030047304502205bc0dfbaae9b6edfcbabf10e9e03bac3a639627e396cb3c808d293ec73378fb3022100983a187937b5fb6ab339fa80d6cddc134ab5584f31e0f7b4cee3af44723dec5d007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e000001707499885c0000040300463044022100ad3bc1b9ba0fb3b6b0f86dea930b618e1c34ad19b496b566083b2937917dc407021f02255e9945db12ea3666452fe0c907c615a454bf93f110b07fc263d2681856
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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