www.askashley.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:55:1c:4d:85:49:49:e4:17:21:40:b6:12:22:6c:d1:be:42 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.askashley.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:55:1c:4d:85:49:49:e4:17:21:40:b6:12:22:6c:d1:be:42
Serial Number (int): 377410765809427842106296271037355525258818
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 5a:66:63:08:1f:05:f7:e1:d4:8b:0c:e4:2f:6f:6f:20:32:ae:b3:13
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 6d:db:54:c4:6a:9e:60:67:3f:e9:98:c2:19:37:f1:11:08:c3:e8:77
Fingerprint (sha256): 99:5f:a9:71:bb:01:af:7b:13:ce:5c:8a:09:8f:8a:a6:83:ac:5b:8b:9e:dc:33:11:06:32:6e:b2:17:fc:03:63

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.askashley.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.askashley.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.askashley.com

Other certificates including the domain name askashley.com

(limited to 100 certificates)
askashley.com
askashley.com
askashley.com
askashley.com
askashley.com
www.askashley.com
askashley.com

Certificate

The complete raw certificate details for www.askashley.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 377410765809427842106296271037355525258818
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-25 08:28:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-25 08:28:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.askashley.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 783821253056689473906242015196646246333552861395602647328116480620148566655116880596195782700954160957894479152981733692935229744247928400499621147266128148306370296177321632365929049289140629435902891080728004438916729390161080892477311223219509707166513783633417739444460231117867209891196032986190759299888693935388608056313388754919572160015211122580723525410354532136516703950617240005736556035859344894668659445340147086706022814974340407442043575289673667263084206484416448466157435490126903059049918781220653286368410700411901793091921277872493529644528513105944683103733365094798485546224763694356397591558811613080201128383948152892791104869615756102340339457264795595960293929151320597535159071091640604144854818879160395748298693894337570559197325668409605100041919384113123809917653456964720922852860307051701176286805830596277714258222077248491845071362110074499288601688709298514153600672025829224488783210755741967127446070736317707843879974015211013979347313950285632177072503403753333040226109431189002420161400956432255857173785861953062191365403380696033908560062919045763982540516482314321043020917358563281560072430110876917756308408099043659669989607227050724094255938557032486396094260182781350291201918174701
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5a6663081f05f7e1d48b0ce42f6f6f2032aeb313
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.askashley.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700e712f2b0377e1a62fb8ec90c6184f1ea7b37cb561d11265bf3e0f34bf241546e000001707bacb30b0000040300483046022100cc3fb82ccfe9a35777b79ce36227c8125b38c62e0b27a0e8b8c95dced641aae4022100d4606b4a967626f5026f7dfa37f8d61662232332e794f9b7c8fe310bffd8e9ff007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e000001707bacb4ff000004030047304502204e316e3a3d0c9611ccd605a0e3ce08681458e8d92d20c2f18607a917dbb1be7d0221009f406b5963d68e44fd4f3d52107d8a59fa10b69dfe2129d6a2ce8ba401afcbea
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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