privateactivities.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:34:df:43:66:43:51:b7:57:c4:ab:29:87:3c:9c:33:41:85 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=privateactivities.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:34:df:43:66:43:51:b7:57:c4:ab:29:87:3c:9c:33:41:85
Serial Number (int): 279328308676258454507696230286694387237253
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 7f:03:6c:78:ba:21:ca:1d:90:79:44:4a:8a:d2:9c:41:e6:71:17:4e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): a1:69:ed:f9:bc:6e:1f:f7:21:fc:f0:38:94:7d:92:a9:29:b1:09:2a
Fingerprint (sha256): 96:4f:49:d7:84:f2:76:5a:e5:aa:1f:2b:6f:49:08:de:cb:e7:25:f3:5e:1f:41:5f:cc:2e:d9:79:ea:ce:f6:e2

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate privateactivities.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for privateactivities.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

privateactivities.com
www.privateactivities.com

Other certificates including the domain name privateactivities.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for privateactivities.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAwBmxIfyD+Gziyy+IZA1L
amlFilFSkoA0ILCOFJZ864oCGMGLDunUvh/Elh3g7ZjguErbh4Aj44jphYaB9S95
phVCenOiBwO1IQsI1dwZ9DlwnmdqQYRigl5yQQ90BPlnais7tcdemYPTAzB7POsf
d8AKSx+xiMy1uTEos124oXe9+RApn96YfyiK2/O0yptggq7VrRXa+U/DGNIYUFgH
fkt/qokprWbhKz2UHravs3hrUF9NrN9FYbyLq/BP0DNESfIktVFcJXTK9peOAtAy
ISc1CAxOLQ6HeGmbipHq9bAdOq6JurJFvBCJs3sWokPDWd6ZeOK6lx99sYmvxfGB
4iQKDvG/UcvuxdQqBpaqgScoiVRRk8QeZmqz98diTiZkd7NutQKV0iCVM7POAs2b
EwQ+gI2BDOnz5TUeywFcJp8drJyZnTjH9LGxlWDHXwwHykHa/kbk5O0BHoVF0Hzq
cbdpt7T7WW6ZE81EWem2EFH3zQ/4H7TMREM93FVNIXLDy6JJF6w4T0yU4YxYCQDF
6g0nC0kxWDngiHXFuuUY+Va+73SLvog9cmlSFMm4qtqzbElvk8o+xX2U/OLbstU/
wjcou6+5gA4ELZe80lFQE+k1x/4GM+NtJKbhvRnkAP/FFrdWrl9dksymWnAsa/Ja
mRZgzvkBEQyY7hdgdQmK1DMCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 279328308676258454507696230286694387237253
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-06 00:29:10 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-05 00:29:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'privateactivities.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 783701090391013445083761047639565261578674927942904913967269632342564392816781432027751371604685660917537286773255789751350010663161562789134493482785693803050849341226582190521759377705182258210075641964136423908522011425258804881551493287688955941116544184176879851741728246296707688732253364848403007710924632087828281342543455958224434205551535484172760085854011550517685086340786532849532833298938059328986928886016473531375407175122784880527101776880140253974376917134781227613113915427062597293886316160827844579481407584443334676551867321231783536796338798372695174529600767669234058983226007531470443141392571952778219018165814187818715598113339187654069479417755634524946877518816526587504936192473191328168149855667465641987809613565622710828395046291090691170649366034737599900578356063577481446088248454805789496431289253528778879113437456671365993804673420104809099421449276956860340774517951053173684605199815195058950143661524121921192446907560114454066955281964893176253221046176514423303389914929694299985141853910209666075580521014811948883669809360501020763842817403876557372107827508458209094462626074182918805540656336095028075190114370145406915507367019496836099510333064207727915254688397000576586041522836531
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7f036c78ba21ca1d9079444a8ad29c41e671174e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'privateactivities.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.privateactivities.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016f78785896000004030046304402205d8fd25562617e3d59f0b7ef6ddd34c003181a2de01edfd0e8894927e7b7ff9e02203c9da2e61c35d42ae3dc181075992b5fc2246fbfbc749c1722ebfe7dfb354fc40077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016f787858ce0000040300483046022100d737b6df74028ce0c799eba6436390e3801da7b30ccb3ce6e245d75cd040587e022100f4a03595202cc2f94a7b0ec74888b1c9841f2913b67d74904b48b79b537eae75
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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