equi.life

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:00:55:24:e1:66:fa:ab:30:c6:a1:e9:63:1b:c8:d1:c4:72 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=equi.life

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:00:55:24:e1:66:fa:ab:30:c6:a1:e9:63:1b:c8:d1:c4:72
Serial Number (int): 348562319601070623296676060369183547966578
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 47:ca:e9:fe:e9:d5:c3:b4:33:3a:61:e1:d1:a7:86:36:03:25:c8:f4
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 19:af:b3:a3:16:23:87:55:de:0f:8f:33:11:7f:1f:31:a0:6e:0f:64
Fingerprint (sha256): 99:f9:06:58:56:fe:07:6c:fe:30:51:22:94:dd:a0:a4:ce:e0:05:6d:72:f7:7e:bc:60:c0:0f:58:63:22:cb:72

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate equi.life

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for equi.life

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

equi.life

Other certificates including the domain name equi.life

(limited to 100 certificates)

Certificate

The complete raw certificate details for equi.life in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA3TjUgRlFoK8X79KvRAxi
eninXmWHKnvii8A4UqYPn6ltrILj+BpQDP/4nUtZfkyBbK0dwOUKHOSOdMzNhJio
EIx1Dhd3XfYfKW7NZCXjvG6LZEcd9mhbm3EcDIdZaRDACONBiqFz+eroQJ72R6k3
vrwOGqmLbTdszWfjcpuOBaeCGzBgyd85eGAyRD9F7q7i1cYo33f9UUMfswOktLxW
VGYNfs6e54Ub3aARWKIFuEQgywK6md/p6nDkRgRAPzt1X5hygfSu+QXqY1SGYST+
C1b5fwHVC8T4s8i0rmKLSfQym10eSz6Tqy2iG2XfiqgKhrYFarRUfvITgBXTJdxZ
7E/5jA4hm1VMZ8vaU+kFcRTfFw6CWkjajs+vvry0pESfmpyVGwSInrJe3yTm02va
mECc8d0IT02V2H63mMWVxnch2YUtnqscONybEv+DdNlZx7vjFpKLsnVSnx+JKXnH
Vkfr/5SOGn1QkLOactlNFbV5ZZsmyKvwl0z2O+yyRDT2HSzEUsrGdaqJgfRlry7I
CkgUPqBtvLg28Iei73rKjjvutu0njqjisFAaQkZr4l2y/RxFMxE3QwVo4q+1ftm1
K+7hkgDMEo9fY9WJauG1A+J3DDiUtlHfX2hULjv04KH4ir+BHhGVqq9BbKs0YNAr
9o/uqbg5OuX3PZcSUuLicbUCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 348562319601070623296676060369183547966578
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-07 01:12:53 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-08 01:12:53 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'equi.life'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 902506989655508551754098790352500718057583952369454096031573580900392881119451196787102937158243336176045024746160053394793182989872304988988246498011951820690495190390406216302578032501696836743525005163763779197986699868970676218541066418747211581603616750117602087836135737969629357836982879179274073193811563206307179583049812358079809544132856886993468579338626724989621125280112944356205557825203134535896689079137195835052211021082875808878159698844145856515789495717577588596677520210160596757293791758003157058323040764089226180330849515421221184121178218266362669009243451556338618810580893857215106726317216472000600641998780930680363372821369860030884903554846861258592964206657546821351902457293756572853031281683552818337660416302391863225486412358422524567679260129590435090804996656398936127475185957698505249819195527641164984842010374837000024602655195311461464043409869085632179015846050530566043155886317755016423211601743139415137588804582257908621930912341586519809725138585990931340631101071106155873369614561103932535225371764312046434680687187802618213933849002165847789163207222932319655370446999016293984240596094105531930715480001963956232812232305678840026337914167598849772098179473978185945531057074613
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							47cae9fee9d5c3b4333a61e1d1a786360325c8f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (13 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'equi.life'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c00000168c5bab386000004030047304502203a0ab478e97cd1e378e3609fbd08b7c502a63c61d02a1ef22a44a33090e37de1022100ee39ebb6588d0eafaa6d9797ec50a48a732103029957e68438df0c0d0f3f5ec600760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d00000168c5bab52500000403004730450220321cbbff1e176f6c1fe3800f125e52790a6feec2d815f05626aa38ff077d2bca022100ac593b06fdfc58e1379e1670788adb32ac177716652045a76ad0be866224ee9e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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