shop.alltrails.com

Issued by R3

About this certificate

This digital certificate with serial number 04:8c:25:c1:52:4b:4d:29:52:0f:93:5a:2e:10:2f:0b:90:86 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=shop.alltrails.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:8c:25:c1:52:4b:4d:29:52:0f:93:5a:2e:10:2f:0b:90:86
Serial Number (int): 396138860314233690567640808757013556990086
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 6c:b2:69:c9:0d:d2:49:ed:44:ef:20:77:09:f5:76:30:f8:a3:91:55
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 86:46:dd:ef:a1:ea:e2:4b:88:a2:f1:cb:df:8d:a5:02:21:ed:71:50
Fingerprint (sha256): a0:8d:d3:40:bb:ca:de:08:68:22:e2:05:40:f4:d9:17:a5:a2:7f:cc:a5:b2:42:36:72:d9:2e:cf:83:90:11:94

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate shop.alltrails.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for shop.alltrails.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

shop.alltrails.com

Other certificates including the domain name alltrails.com

(limited to 100 certificates)
adminsupport.maxwellhealth.com
fluxx.totemapp.net
alltrails.com
orders.alltrails.com
orders.alltrails.com
support.alltrails.com
orders.alltrails.com
orders.alltrails.com
easymarkit.totemapp.net
www.distilnetworks.com
adminsupport.maxwellhealth.com
adminsupport.maxwellhealth.com
orders.alltrails.com
adamlyonsw.totemapp.net
adminsupport.maxwellhealth.com
*.alltrails.com
orders.alltrails.com
dojo-madness.totemapp.net
*.alltrails.com
*.alltrails.com
about.ksting.com
about.ksting.com
orders.alltrails.com
*.alltrails.com
support.alltrails.com
orders.alltrails.com
*.dev.alltrails.com
atlantis.dev.alltrails.com
lp.alltrails.com
about.ksting.com
*.alltrails.com
www.distilnetworks.com
adminsupport.maxwellhealth.com
adminsupport.maxwellhealth.com
about.ksting.com
fr.cdn-assets.alltrails.com
www.distilnetworks.com
adminsupport.maxwellhealth.com
orders.alltrails.com
adminsupport.maxwellhealth.com
press.getsundaily.com
console.alltrails.com
adminsupport.maxwellhealth.com
*.alltrails.com
alltrails.com
alltrails.com
about.ksting.com
*.alltrails.com
alltrails.com
www.distilnetworks.com
shop.alltrails.com
support.alltrails.com
dodo.totemapp.net
adminsupport.maxwellhealth.com
totem.alltrails.com
fluxx.totemapp.net
www.distilnetworks.com
press.swipecast.com
support.swimlane.com
geppetto-api.production.alltrails.com
adminsupport.maxwellhealth.com
picachocoffee.totemapp.net
bonusly.totemapp.net
intothewhoknows.totemapp.net
adminsupport.maxwellhealth.com
archmission.totemapp.net
about.ksting.com
support.swimlane.com
about.ksting.com
*.alltrails.com
press.getsundaily.com
archmission.totemapp.net
*.alltrails.com
about.ksting.com
orders.alltrails.com
britttest.totemapp.net
support.alltrails.com
www.distilnetworks.com
alltrails.com
adminsupport.maxwellhealth.com
fourpointsbar.totemapp.net
totem.alltrails.com
www.distilnetworks.com
*.webdev.alltrails.com
adminsupport.maxwellhealth.com
www.distilnetworks.com
about.ksting.com
*.alltrails.com
insitome.totemapp.net
orders.alltrails.com
beardedbastard.totemapp.net
journal.alltrails.com
shop.alltrails.com
cdn-assets-2.alltrails.com
shop.alltrails.com
orders.alltrails.com
fr.cdn-assets.alltrails.com
*.alltrails.com
*.dev.alltrails.com
orders.alltrails.com

Certificate

The complete raw certificate details for shop.alltrails.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Dcr62rJ2OwIGDOSU6Zm
KDK1Oy0dXPQEJVNZh2WuvSFvMUAQS+Lm4KXAVAvk1Ffqs2Qwuzb/7mAnjip7j7+c
Gbt40XRrwu7zhmlaEWQwe01eycSVs5d40u5X6MjLCjMzd2ba54MVoyC/fBijxiH1
glkytVRe6G78Z/PvYf3G4+xkw+39jyJUKXGEtMfTPAt9a3YlM4mXJZKUTzaDKnRg
g3UNbNeTtx00/O6z7jjEOrdL1O8pn2Xfg6KVK+reKURwZwy8PdXtQmdDwNO0qqiA
nz3DB36XlB+Dq6zjXd2rs8Fm85EivHYKKNiqr6+l82GywPbPwtOxLCZuJM2O1r3F
swIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 396138860314233690567640808757013556990086
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-02 11:43:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-01 11:43:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'shop.alltrails.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26284773543620663166055321217176282379975354442895922082617368098954155804563264094671727603366529601095522253063078415807552214143949846676007437898529013691619340959674431169989991855389063173331057364238569663867284337041211900512009245875431081620984389740693538158628455132020331052197002228340466841493529106270594131640950118561496728881626732955304893926138885653579963345580456460569613420822105581693907161909858214616419005584138960797612766921032996394109132214064262589619424983872736368134064403500362232790722249762970580523961339977344237777052577352201951144004023682041388203855057925766102390785459
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6cb269c90dd249ed44ef207709f57630f8a39155
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.alltrails.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018a55eb3b5f0000040300483046022100e7d54477d35c3ba6bb2ae3d3ed181ebbde2e3522dbe98f627f2f8b8d3258d43f022100f5d2f6d54e4df6df017e2ccac9d53db0cbe95d55b250133ee853fff2c4d9ed570076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018a55eb3b440000040300473045022100c8cb5b02984f99f21e1331d7be76da97dee5abddfb5b31c6be41593ee7c62f7c02207751123ee314afdae81e57ed733b68a37d72694acb8c297cd4299c28ee6d6086
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00ba08735d9915ed94eac779c436f744cc4dcbb7cf1191019ec5f1f77b44c31d1a2f1571e567553060f6cfaffb94326a14d3309878098ab28f03bfd6a679a838d467bd98bf4cdd122f6aab955479d9e0d1af2ab18226cb32e42f0372fa18007855370b6df40c06814ab5e51e99338032e67bd9eb69d2b548f91e27fa424b2ba788c69e638375858485bc46869bde435e7c8ac412fb99b1300d0f1a2cc95fa363f4f6605f3cb97b4a321206af21f4e2433878f5488485fc38b9859d2eeca9ce1bc32575b04de16b1bd8eed25b421e9f4daff2657550dca53465821efdc19c54b5ac7c2468126cdf397b156aadb317aad3512bd060268625d87103712262d9f1ea36