biking.vacations

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:94:f2:67:13:1f:12:f5:9e:e9:91:60:54:8f:30:b9:72:6f was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=biking.vacations

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:94:f2:67:13:1f:12:f5:9e:e9:91:60:54:8f:30:b9:72:6f
Serial Number (int): 312020856468963734435708593801277428298351
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 0b:ea:07:6f:2b:32:e9:dd:6a:d5:5d:ad:dd:13:6a:20:58:a5:25:6b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 1c:02:d6:af:8f:b5:4e:ff:10:8b:ec:95:0b:64:c1:2f:a9:9e:0c:34
Fingerprint (sha256): a0:22:57:8f:5f:01:5b:54:13:fb:89:aa:0d:2c:3f:cb:d2:2c:bc:24:cd:26:cd:41:93:22:36:f7:08:0a:82:d9

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate biking.vacations

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for biking.vacations

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

biking.vacations

Other certificates including the domain name biking.vacations

(limited to 100 certificates)

Certificate

The complete raw certificate details for biking.vacations in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGVzCCBT+gAwIBAgISA5TyZxMfEvWe6ZFgVI8wuXJvMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEwMTIwNzA0NDlaFw0y
MDAxMTAwNzA0NDlaMBsxGTAXBgNVBAMTEGJpa2luZy52YWNhdGlvbnMwggIiMA0G
CSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDSu1Bzl71Y5NJKqNQeAW1+EwnFtc1L
K7L9BcxCho9iQpbPwcTgl61YvmiQ8gz3UTCtStpdKrasQU2Oq+7lf1GXSX06fYgf
2Mgde8S14HQqlGiDKeguUJ/ax8gj1e9gV4Zryo50XPWE7GAtO8i/0Gj204+Hjo1n
PUSzq6qBmN7fJPcYdg10v961otB8BrktH8K70iDIUvP1E/fMpp5wBDw9hcY8SyS8
75s2jiIe8AWXPGRnGQIG2jWLReRwPNq3CNu/CpVTH0bWQSeMIwx4EFhoyS55XyYE
lpeRGJZPbB6QyfEatENlKn6WBFzj/UAUPPZlO6BFxmtAr8X2vNQcfUCbTsroxTy5
L8eOxluE4lMVTSP5guQaoPhLHnHxkcTOLtqjTTUuLHa1EtzePj6rTtTiPhYwLPcz
75YwVgzdpsX+uXjQzjnrx7csp6dNpuZ8/pvm1uHDcJHSkC5guEtwzkfBPVOnMmVh
Py7V6S3cH9ZTMKqQ3qW50Llv/O0oGT2XB5FPTmI4IOsUiLvC67xk59r0yoZl8Hh+
xV9EB3zxH0DcWlaza8iEuULVG69p7Wtb3Ow1Xg7XY4/WNspVSTUiA7tGHe39shG+
wnkpJkX5wsDTlbkSYGrwkj612aOgQavDk7rPiXIBubxze3nHXoopKOdH+sK2PEKn
YFBh9R1m/gm4TwIDAQABo4ICZDCCAmAwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQW
MBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBQL
6gdvKzLp3WrVXa3dE2ogWKUlazAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv
86jsoTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmlu
dC14My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0Lmlu
dC14My5sZXRzZW5jcnlwdC5vcmcvMBsGA1UdEQQUMBKCEGJpa2luZy52YWNhdGlv
bnMwTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEF
BQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEDBgorBgEEAdZ5AgQC
BIH0BIHxAO8AdgCyHgXMi6LNiiBOh2b5K7mKJSBna9r6cOeySVMt74uQXgAAAW2+
/6wSAAAEAwBHMEUCID6E1u1YMvTRgMJT/sD0wn9hR7Znkd0fSo6bEei12qmDAiEA
goYw/C3daFGvdoqPnRHu1NfUEG7hoO0bQPuIVkWU/W8AdQDwlaRZ8gDRgkAQLS+T
iI6tS/4dR+OZ4dA0prCoqo6ycwAAAW2+/6zGAAAEAwBGMEQCIBKl3qga0M8SYj6B
P8GLSNmgFCeSIxaJBD2UEanU5FWfAiBaonoLBEe+vfa6Fv44+WiOHPoMT0WPCAmY
m9IqUTOcMjANBgkqhkiG9w0BAQsFAAOCAQEAYyTTeOygc1MHN+BzEqaxRR0z5Jhf
h9FgK0u4lTmPmy2BZ9iMP8zc7/v7ipObOAC/OjY8GWBOe66EjepHPuS4FJRNafdj
AhNXw+OLVbAazB5WMx8SjptlcDOlhqzAySOQpTHdQU/XJZR50fQu2Pc7oC+TcqVE
osRHMra8bPxdAU77kWQmJQ0ee70FBf3IbHGtI9ykUMMIWedALHxZ4WyB0WUqA66g
JabhoZcb0EMXT+dWRTKVGH8AONp3QG7VN6wT7MCSs7ywbXcp+iEFl0OVewlOIIRX
CSe7CWClXXn+EqmGTnQfxumGI1AQjzsiyILqJFpYPh56QnPyH2P9BkHzsw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA0rtQc5e9WOTSSqjUHgFt
fhMJxbXNSyuy/QXMQoaPYkKWz8HE4JetWL5okPIM91EwrUraXSq2rEFNjqvu5X9R
l0l9On2IH9jIHXvEteB0KpRogynoLlCf2sfII9XvYFeGa8qOdFz1hOxgLTvIv9Bo
9tOPh46NZz1Es6uqgZje3yT3GHYNdL/etaLQfAa5LR/Cu9IgyFLz9RP3zKaecAQ8
PYXGPEskvO+bNo4iHvAFlzxkZxkCBto1i0XkcDzatwjbvwqVUx9G1kEnjCMMeBBY
aMkueV8mBJaXkRiWT2wekMnxGrRDZSp+lgRc4/1AFDz2ZTugRcZrQK/F9rzUHH1A
m07K6MU8uS/HjsZbhOJTFU0j+YLkGqD4Sx5x8ZHEzi7ao001Lix2tRLc3j4+q07U
4j4WMCz3M++WMFYM3abF/rl40M4568e3LKenTabmfP6b5tbhw3CR0pAuYLhLcM5H
wT1TpzJlYT8u1ekt3B/WUzCqkN6ludC5b/ztKBk9lweRT05iOCDrFIi7wuu8ZOfa
9MqGZfB4fsVfRAd88R9A3FpWs2vIhLlC1Ruvae1rW9zsNV4O12OP1jbKVUk1IgO7
Rh3t/bIRvsJ5KSZF+cLA05W5EmBq8JI+tdmjoEGrw5O6z4lyAbm8c3t5x16KKSjn
R/rCtjxCp2BQYfUdZv4JuE8CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 312020856468963734435708593801277428298351
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-12 07:04:49 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-10 07:04:49 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'biking.vacations'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 859710314929492889430375766221419624928358082082216006501816341664714999521632561569767007348091291789944288763121878850169556373125861743722987612086952038240792035492544261571949348396294013182628206679377593241141762754915686452720029051729645114599152855148315380347025210256109654255466250164877613509017982110651312983885257660188531772460498238700587991686782566625906777292219564696121328135977183694251715478877215134789360174155068102917048369192763256496360473759009949381166218705213291547664893192483816431437300041230416774138514429477972728184922570476590819504580690195498729529233417472179291858361984452760759744743863127672074398208295833173149833976013634861930809275398584216710335816724554285150744357456477765419694480163962002178906983740520487973471024396712131658457908699240786480879801710163738040553137476283246869645697649266697071935741849858540310666490758550801683120997057551045577531474959499619899920252283224378039686097969257608123414764131826168079075129965043362164156301267586264738486955253192285615865023837493502041988850288347525765023159151207343773094349968106845488509946326780676681939004104656583280628455818167140910807162646842937664268826016172042650186867272467547056773855295567
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0bea076f2b32e9dd6ad55daddd136a2058a5256b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biking.vacations'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016dbeffac12000004030047304502203e84d6ed5832f4d180c253fec0f4c27f6147b66791dd1f4a8e9b11e8b5daa983022100828630fc2ddd6851af768a8f9d11eed4d7d4106ee1a0ed1b40fb88564594fd6f007500f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016dbeffacc60000040300463044022012a5dea81ad0cf12623e813fc18b48d9a0142792231689043d9411a9d4e4559f02205aa27a0b0447bebdf6ba16fe38f9688e1cfa0c4f458f0809989bd22a51339c32
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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