groovystash.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:1f:f9:40:47:14:0e:4d:04:50:3c:e7:c8:9d:44:10:e7:2d was issued on by Let's Encrypt.

With 24 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=groovystash.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:1f:f9:40:47:14:0e:4d:04:50:3c:e7:c8:9d:44:10:e7:2d
Serial Number (int): 272216922689419293595906675411607014663981
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 9f:e0:21:58:0c:73:b9:90:c9:d8:1d:12:95:4a:f0:c3:1f:0b:e3:a8
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 12:d0:ad:ef:7f:37:81:e6:d2:0f:a0:81:09:1b:0f:c2:16:81:e1:1e
Fingerprint (sha256): a0:3d:7c:c3:3e:61:d9:bc:5a:4e:b9:94:4f:3b:f0:04:66:53:64:37:e3:90:f1:c3:07:51:37:51:b7:24:11:2c

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate groovystash.com

24

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for groovystash.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

8commandments.com
8commandments.helpfulhintsforliving.com
calapriceandassociates.helpfulhintsforliving.com
gadgetzan-us.helpfulhintsforliving.com
groovystash.com
groovystash.helpfulhintsforliving.com
helpfulhintsforliving.com
mail.8commandments.com
mail.groovystash.com
mail.helpfulhintsforliving.com
mail.paleobunker.com
paleobunker.com
paleobunker.helpfulhintsforliving.com
photographiasf.helpfulhintsforliving.com
www.8commandments.com
www.8commandments.helpfulhintsforliving.com
www.calapriceandassociates.helpfulhintsforliving.com
www.gadgetzan-us.helpfulhintsforliving.com
www.groovystash.com
www.groovystash.helpfulhintsforliving.com
www.helpfulhintsforliving.com
www.paleobunker.com
www.paleobunker.helpfulhintsforliving.com
www.photographiasf.helpfulhintsforliving.com

Other certificates including the domain name groovystash.com

(limited to 100 certificates)
groovystash.com
automatedho.me
skethio.com
helpfulhintsforliving.com
8commandments.com
groovystash.com
groovystash.com
groovystash.com
horvath.ca
freedombunker.com
tidysac.com

Certificate

The complete raw certificate details for groovystash.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptup8wF2W5lBX/pLdGlY
117d0BpGeBNzR9cW1YPcAuNY5S5KRxny+n6R7Q/AYZDF/veetuts9du5Y/Uo0mFN
RkCmrKm/sg8oP3xRnWEHIaBnBTlKH6beGVFP/DnA+m9RgLT2PScksUNXWW1aU3NQ
Xiv92cLcaTl/C1w30nr4KO7jLEgp11iuFbohV3c3HiYYtFct3e8K9v1MnBydPPoj
QXzYD8dFOVIzHrpZiXUHuoQrSLQ3ihaxUBBM7+KWsG/1TNwayEBcEIaTPJnNjchB
BanPj7j70EJraNnywav1yQ4jj0vm+ObLzum9NfdVbS1l9/+HEp18ja4nDBrEZE2u
ewIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 272216922689419293595906675411607014663981
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-10 10:19:56 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-08 10:19:56 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'groovystash.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21063878912966488596290983336238358832866006287434479091325615853640065947662587603583920482115418643788340200332647314251517065537396749057976456562077341643028395057856268433053440565008104591570133065441878763699389853641282136399381430757525776857167814482688056807718355691037168406597250736774927313458729059158241295680916128956156874051568449540484565855563404346756075061460868533009350016332280067389919409698696333913286937830127556474944484418347635499081238082794106361846993568744142286749408812589350420058719573507086237037643783810380584651620865260115226056084687183912228320577694275776070313422459
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9fe021580c73b990c9d81d12954af0c31f0be3a8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (806 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '8commandments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '8commandments.helpfulhintsforliving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'calapriceandassociates.helpfulhintsforliving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gadgetzan-us.helpfulhintsforliving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groovystash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groovystash.helpfulhintsforliving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpfulhintsforliving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.8commandments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.groovystash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.helpfulhintsforliving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.paleobunker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paleobunker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paleobunker.helpfulhintsforliving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'photographiasf.helpfulhintsforliving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.8commandments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.8commandments.helpfulhintsforliving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.calapriceandassociates.helpfulhintsforliving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gadgetzan-us.helpfulhintsforliving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.groovystash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.groovystash.helpfulhintsforliving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.helpfulhintsforliving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paleobunker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paleobunker.helpfulhintsforliving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.photographiasf.helpfulhintsforliving.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016aa178985f0000040300483046022100e326464a62570f563e735f4b1ba515f98b8d1221d281f9bb8d5ef21e635a963e022100ee28151fdac7b09d6a791f95fbf63651755c4a6525b00ce212b1b676b936134e00750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016aa178982f000004030046304402205f6c7f25e0838cf2ea5eed7e375566f0d343f4f3dcb3892c003ef01e8200fef90220018221a84098f438d8bcbbb240c241120807c43a39a4de6d661d0dc2c3e2c29f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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