haddonfield.work

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:cd:79:6e:b4:48:c5:67:94:06:40:09:06:50:44:b6:15:9c was issued on by Let's Encrypt.

With 15 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=haddonfield.work

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:cd:79:6e:b4:48:c5:67:94:06:40:09:06:50:44:b6:15:9c
Serial Number (int): 331256154410816788725171460097969564816796
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e9:2a:8c:2d:89:9f:ae:7a:be:5b:2d:70:09:bb:65:03:b8:9b:dd:1f
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): a4:1b:44:a3:1d:a4:09:73:41:98:af:44:60:49:4d:2a:86:fe:65:58
Fingerprint (sha256): 8e:22:a0:a7:30:5a:bf:7d:28:8c:02:91:7c:b1:5a:e2:63:4a:2a:07:3b:86:09:88:b7:ed:5b:17:52:f1:2f:4b

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate haddonfield.work

15

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for haddonfield.work

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

amigosworld.com
doodletots.com
drudgepodcast.com
haddonfield.work
healthyhomedirt.com
hilobedandbreakfast.com
hohokus.work
juneau.work
kidsclimbingholds.com
kulasuccess.com
mercatobio.it
migrainelab.com
mostar.work
vrthreesixty.com
willcox.work

Other certificates including the domain name haddonfield.work

(limited to 100 certificates)
haddonfield.work
novolineonline.com.de
novolineonline.com.de
balmorallaw.ca
haddonfield.work
novolineonline.com.de
balmorallaw.ca
www.budgeting.me
haddonfield.work

Certificate

The complete raw certificate details for haddonfield.work in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8u8fl+Nve8dm5xW3UoY
cStGkBXUsKOBLW29JjldnZFWfEDGLP+OVEz6x11XzgVq1WDksRWyoTzjD5oEXBXu
CTHmDl/+ZcS6S3/uejbnKSECIc1uG4QcwFbWfHVSSTql3BZjiT0reZQtmU3NqYTc
eOmxb/rOuCmMhXqiXPgiSyJug1pWtwNKhTMiKVsaoPXXUykRrhRcRH3E5NbzLWta
eYseTMtL0+IW4YalFpOGaxBLBYPWmqZsqpPc3fkICF0k3hd+1jp44931RecABnFg
6wIBmnZuQnD8e+7mwMbdW+UCnbAE8DJUlNWOcXk1hrKPdpM92wbSgl5ppvhOYg9d
IQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 331256154410816788725171460097969564816796
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-26 21:38:36 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-25 21:38:36 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'haddonfield.work'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21687216264778073187531499436217780019963264453301118583904055951913062847913152887953297343146166574038562552449352838748918399221509795216521946310786267494184156846157851929962988195843914833736531576398420792535497868105234467731192681918348148776186757443539744804395965237011685556849234027089776616171192877475578635596439511131788229288833501598698589368982216152199509539364056885060243408607344363005898324206859971950667984087661510569452492212314229939401474978155548328062696970558051444140208531227504315314378177732646144541387030397313035518161558645260574501911323457407396185038310535152635879578913
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e92a8c2d899fae7abe5b2d7009bb6503b89bdd1f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (264 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amigosworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doodletots.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drudgepodcast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'haddonfield.work'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthyhomedirt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hilobedandbreakfast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hohokus.work'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'juneau.work'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kidsclimbingholds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kulasuccess.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mercatobio.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'migrainelab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mostar.work'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vrthreesixty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'willcox.work'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016a5bcce9470000040300483046022100dd1485ca7dcf7cc0230b1b2be100684fa2f84a89364fd64eebb359a7715fb6360221009e9fd4ff741cb222e5120fa3a57aead0f4b1296e05ab8baf2e6b162fa43c958900750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016a5bcce7550000040300463044022055397039ee736ae532ac5f7c9f09b25161e5a6ef9786d4984e2f1b1fe2395a6a02202758f390974fbbc68d1cc0e56bc73d23ac015f46d5cef0daa8b5a1e9146ff771
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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