www.birdflublog.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:a5:ce:57:28:05:ee:bf:bd:a9:30:12:43:d0:ca:00:f5:d8 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.birdflublog.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:a5:ce:57:28:05:ee:bf:bd:a9:30:12:43:d0:ca:00:f5:d8Serial Number (int): 317757721845960385802605769224272054646232
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 2e:b6:83:e7:c6:f9:55:df:bb:58:88:ff:d3:7a:c9:7b:02:ea:6a:0c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): e9:e4:7c:95:fe:a8:a2:b5:d0:bd:5e:5d:dc:28:4c:fa:72:09:fa:57
Fingerprint (sha256): 8d:95:30:ee:28:16:97:86:98:cf:d9:2e:41:53:88:af:d5:ce:27:82:5e:4c:f0:1c:e1:bd:a2:fc:73:6d:04:71
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate www.birdflublog.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.birdflublog.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.birdflublog.com
Other certificates including the domain name birdflublog.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for www.birdflublog.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGXzCCBUegAwIBAgISA6XOVygF7r+9qTASQ9DKAPXYMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEyMjMxNDMzMTJaFw0y MDAzMjIxNDMzMTJaMB4xHDAaBgNVBAMTE3d3dy5iaXJkZmx1YmxvZy5jb20wggIi MA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDRZ3dNc7csJqc1uXaOWUaYrub+ vdHZ1fWEgL28zChbhhY6RXw28HYQkK5opPTQR2tsZhFQhI0fx8ctq32dRKWXkGCg 0rV1LVp2gty7C2/O9srL5MxfOxXPBG5xOCHXiqe8kR5kqZ+0zNT8yyD/akvO4bnx ZxTJ2uXtpBpD7HPYnWecFS4rMNThqKk0p9qWJSq2E/74RotPNMA5PtLHICWv/sy3 BKSVDoTolFprU2Ojxvng3WeP43MkKud92AAzoTQmz5upJ5l0yrlpa444rSvSjVSy vnwk+6e6mJagQFFUszmimFGuor4AvPh+HirM9w0gZAl+SvYSKa5vJmSbBZX/lukZ kwN7Xz2AP49IxCFG0htpf+xJFdM78INbDlMHF7YHR8JgOoOrcO+sCww6WHkQuu+O kqHZ+IDV+6z6xZeoeyE1zfrwgdg2ezEGiaJtNdjsTBxwbmdNTlJErcnQFM9tNXgM d9THyWoNKGPmTZsPageSGuY4fXTXs5qvUof+73t+2U3SIx9h7Vx2hxYzCWmZDMn9 3c8OZXePSJnuKCNJKrsAFK/34aCfDmlpvluMHr0MdCXs0ezdNJ4AHeK73pz0mCnO qRiURhJ91X3DCUk9H+5cQD9vcEy3BCDYOaKypI7Xf/FZOCViqcEBLmNPN5GneTQS h53eayPBj8IL1h4DhQIDAQABo4ICaTCCAmUwDgYDVR0PAQH/BAQDAgWgMB0GA1Ud JQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQW BBQutoPnxvlV37tYiP/Tesl7AupqDDAfBgNVHSMEGDAWgBSoSmpjBH3duubRObem RWXv86jsoTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3Nw LmludC14My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0 LmludC14My5sZXRzZW5jcnlwdC5vcmcvMB4GA1UdEQQXMBWCE3d3dy5iaXJkZmx1 YmxvZy5jb20wTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAm BggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEFBgorBgEE AdZ5AgQCBIH2BIHzAPEAdgDwlaRZ8gDRgkAQLS+TiI6tS/4dR+OZ4dA0prCoqo6y cwAAAW8zZAzsAAAEAwBHMEUCIQDq/HQcqHhI/Kh6p/EpEeD2dI9mCs3YV5mUOhWJ 0wi6iQIgGEtFy9ZmqOsTfxhD8U/5qu7D4ofb/+9leO9pKgiEFu0AdwCyHgXMi6LN iiBOh2b5K7mKJSBna9r6cOeySVMt74uQXgAAAW8zZA0KAAAEAwBIMEYCIQD/8RS2 8pNDwfTzMa8RoLvroTZSHQpQ9m3IC8qNWjsqVwIhANyzw8/tnv6NX1HIlT9TATP1 G6Hwkj1t23f7hEDOY8F7MA0GCSqGSIb3DQEBCwUAA4IBAQA77mZQrXEH3BFfYuhI rFkCfHdCJezvKijD8cI0psw/jLwDYZVvujT3MCyhFQ1uWueGPqJaxHCYKUwA8uSm OrldyzTwbPTNoVDrK0bVyIwo67N8iqBGyHFtb07URMXUoJWDv9MJcCtC/LkkTvX0 YnF1vzkbRP1xnutTaFgRmDucj/DPOq6VtleAGPpwyuXvER4JO6pOCdGKvz0HR44k NMeIp9cuI3Za6jZLyb03B7X8QjJ+SQI8GUz0EOPrhLmKNdCTytXgRThkShccFNA3 w9GWW7QrX/rnXK8MW5T4guFMaSigu/ZyhZH8p7ef38Rgtg6ZaYnFiLZdAF+y/SDJ 3dTn -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA0Wd3TXO3LCanNbl2jllG mK7m/r3R2dX1hIC9vMwoW4YWOkV8NvB2EJCuaKT00EdrbGYRUISNH8fHLat9nUSl l5BgoNK1dS1adoLcuwtvzvbKy+TMXzsVzwRucTgh14qnvJEeZKmftMzU/Msg/2pL zuG58WcUydrl7aQaQ+xz2J1nnBUuKzDU4aipNKfaliUqthP++EaLTzTAOT7SxyAl r/7MtwSklQ6E6JRaa1Njo8b54N1nj+NzJCrnfdgAM6E0Js+bqSeZdMq5aWuOOK0r 0o1Usr58JPunupiWoEBRVLM5ophRrqK+ALz4fh4qzPcNIGQJfkr2EimubyZkmwWV /5bpGZMDe189gD+PSMQhRtIbaX/sSRXTO/CDWw5TBxe2B0fCYDqDq3DvrAsMOlh5 ELrvjpKh2fiA1fus+sWXqHshNc368IHYNnsxBomibTXY7EwccG5nTU5SRK3J0BTP bTV4DHfUx8lqDShj5k2bD2oHkhrmOH1017Oar1KH/u97ftlN0iMfYe1cdocWMwlp mQzJ/d3PDmV3j0iZ7igjSSq7ABSv9+Ggnw5pab5bjB69DHQl7NHs3TSeAB3iu96c 9JgpzqkYlEYSfdV9wwlJPR/uXEA/b3BMtwQg2DmisqSO13/xWTglYqnBAS5jTzeR p3k0Eoed3msjwY/CC9YeA4UCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 317757721845960385802605769224272054646232 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-23 14:33:12 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-22 14:33:12 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.birdflublog.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 854294456143840693287622963072840097182995373614117915606686754813693697619597461162791438819465602051766540220946846368778799202940824130929278301166445765799919212773361825369371726958898281762632934080903040053826775237384328225404501219570642731253173968220030970364146048419252090923273073585536889906280113648064912660651679291277279533448321478512623151418141149042765495425996426998638981933127800271754450560308830754499120961990123944356426527214704306655092344866721275447139833255354416253832073982313787525029335208025292447877217998234397872607558596505437624583088822897069064395094580831513572632300189319136101114023806609275756879572681343794643522805841150920712870758339785547673964055385224759786692992847146564049174726856123473462704838925014454674118387025172892380386927110334165475640743918690515046803794967647647969421082162965685072203338062157086370323478895016297290304976500014198731485157086166917359897005012947614965336634695056960333043291068738891118976447342104423665700584654088902898935016897374425869577589561358161281595538991502405988142581109477906958924549160953839158941821670290668700549461957816948791022148746665590169917815871905149179572891666544269428209109087469188172204780422021 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 2eb683e7c6f955dfbb5888ffd37ac97b02ea6a0c . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.birdflublog.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016f33640cec0000040300473045022100eafc741ca87848fca87aa7f12911e0f6748f660acdd85799943a1589d308ba890220184b45cbd666a8eb137f1843f14ff9aaeec3e287dbffef6578ef692a088416ed007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016f33640d0a0000040300483046022100fff114b6f29343c1f4f331af11a0bbeba136521d0a50f66dc80bca8d5a3b2a57022100dcb3c3cfed9efe8d5f51c8953f530133f51ba1f0923d6ddb77fb8440ce63c17b . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 003bee6650ad7107dc115f62e848ac59027c774225ecef2a28c3f1c234a6cc3f8cbc0361956fba34f7302ca1150d6e5ae7863ea25ac47098294c00f2e4a63ab95dcb34f06cf4cda150eb2b46d5c88c28ebb37c8aa046c8716d6f4ed444c5d4a09583bfd309702b42fcb9244ef5f4627175bf391b44fd719eeb53685811983b9c8ff0cf3aae95b6578018fa70cae5ef111e093baa4e09d18abf3d07478e2434c788a7d72e23765aea364bc9bd3707b5fc42327e49023c194cf410e3eb84b98a35d093cad5e04538644a171c14d037c3d1965bb42b5ffae75caf0c5b94f882e14c6928a0bbf6728591fca7b79fdfc460b60e996989c588b65d005fb2fd20c9ddd4e7