cd.am

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:d7:d7:3c:89:3d:b7:08:03:1b:be:24:99:a8:2b:c2:44:ef was issued on by Let's Encrypt.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cd.am

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d7:d7:3c:89:3d:b7:08:03:1b:be:24:99:a8:2b:c2:44:ef
Serial Number (int): 334783665023767457643360967975270848021743
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: a2:18:e1:e7:51:54:2b:88:88:86:11:53:fe:1e:81:d1:bc:09:5a:71
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 64:26:b9:3b:2a:57:15:1a:ef:e5:7d:98:fd:13:00:5b:d9:d4:da:ff
Fingerprint (sha256): 96:fa:56:0d:63:47:f6:bb:ee:1a:41:f4:91:e4:c9:19:16:fc:c4:91:3d:fd:7b:95:23:fd:43:5e:ac:88:13:c9

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate cd.am

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cd.am

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cd.am
mail.cd.am
www.cd.am

Other certificates including the domain name cd.am

(limited to 100 certificates)

Certificate

The complete raw certificate details for cd.am in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 334783665023767457643360967975270848021743
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-17 02:16:29 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-15 02:16:29 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cd.am'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 795853056342147650662108095676863391118194582303339601465632073029690317188258707049238851628295621244628726146749328870549067691916563101774724752730117566689909916830890673826111576518177762441104096666296660324518121051486698834618816786934923458379923763309859682006373170368885904732969044479027335973087632472221234427397501862993395610727322896422509843576840039150403885383159236223465150836881448677104129173137492551335898863209491618715839614913768591235143416870645219756063344575193723784722472089986029598927921164490823349384030210282495761834098795975555157179812011063016421717022520070248728702071166731890888976815030303594691061653383244320982355602802896763750312897555474496717421270584514968897719071219778823472074597214144791418385383219259694746689912855037745793413764972347496816668046881482794416767648273211297486899358627903585309180992159378464491724376641718632971438697694295371787856672054099206566201929280812202898320231488580816380461641638618016293220285865514501545109567420802781253974460841941865869271246118604188340196277536652070903924504886747651834465779061481281384368895888329369684490321137679345657402297173393581748143286822378512880108486234871844135433008777543903180097968912637
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a218e1e751542b8888861153fe1e81d1bc095a71
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cd.am'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.cd.am'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cd.am'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016989a6945e00000403004730450221009e35ff22fcd22f5b482a149fe37a8e90b4e181a5ec7d584869b7661bd8d3beba022015430855adc1e862777e350940ed9f55b1c3f15a3065a353ef003f8b7b0535c1007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016989a69608000004030047304502202f0c02ed95f12ded61aeb674859cc7bf5964c66f16d4aa4232aeba6b1f6206d30221009200d54be558324d8dc9fe86f83c2b4031c9fe16320d2459107d68aeb7c50355
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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