fossilcast.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:9c:9c:d2:e0:fe:27:ad:90:a8:ef:f7:eb:dc:76:ac:4a:98 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=fossilcast.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:9c:9c:d2:e0:fe:27:ad:90:a8:ef:f7:eb:dc:76:ac:4a:98
Serial Number (int): 314629361548025863669417383160297183529624
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 20:57:22:16:1d:2f:7c:61:1a:09:5e:32:77:23:e3:bf:7e:28:cc:0a
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): f8:4e:9d:50:2a:38:82:e3:33:97:80:e3:6f:6c:0d:ea:73:97:b3:8a
Fingerprint (sha256): a4:38:5b:c7:60:53:87:e4:a1:aa:92:ce:fb:9b:2e:66:4a:9a:b0:bd:a8:f9:21:f1:0e:3d:67:cf:55:67:58:bd

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate fossilcast.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for fossilcast.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

fossilcast.com

Other certificates including the domain name fossilcast.com

(limited to 100 certificates)
ieiozdyt.nl
www.siliconattorneys.com
kudzucontrolestimate.com
www.fossilcast.com
www.crimpmaster.com
www.fossilcast.com
www.fossilcast.com
www.jointpainconnecticut.com
damnreview.com
fossilcast.com
fossilcast.com
fossilcast.com
www.newyorksportsmedicine.net
fossilcast.com
artisticraft.com
fossilcast.com

Certificate

The complete raw certificate details for fossilcast.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 314629361548025863669417383160297183529624
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-12 23:34:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-10 23:34:21 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fossilcast.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 709228193262751041467244886005042287987619677237633207396837663627762072135080296984311650729732067857558993693276262726716780900976826488031543547932737785863944025724232956136817370502677320053670039123458489797054864419713853400791182768519719210264059442337817726255155846460567098960868489287706287858868127592045737491853251850076574320673237182482926550840849024928334818972793737222907143424280374896657843798004563553535787980263509711353919165821654575202400885670876595742406003008925125352054801828378224671623739618638504441035010442602121255253832627717464395613807438530338015265481540873786818668857686109881836761251054356834527745251625478214291183961394010336466547204880293734244919603779469639365181969460582045524867449149223040693304025636892879193060068670796424737632669500884890533029172784018779466236348298941983126830654860993040090522107736756828726478750016725225709827613113809962957088958579842693501741544087220047250158173726381849473547276698073255284972354196906556357598962016485761335373684187027756846366816355589117600661838709778593791911559567744213340142330679592924657096800478688565739235414141458391635883130295510194558400814659234994391273899499146233578192058924093528193111651969897
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							205722161d2f7c611a095e327723e3bf7e28cc0a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fossilcast.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00077005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016dc2899ea80000040300483046022100e9a5fcb2d08b22d3cda9db043c33a20e348c09a8f1d4a29f8c8699b5f4780260022100cda55eea23220b74bdead4b5d0e787cd4c0ee3eb65ac8324ff08f020f0e65cd5007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016dc2899ebf000004030046304402205cc1c6e2598d49d15c33b9968293cf8565aee1c22e2b1ec26a0103527fc01a5c02200b927b82204cfc621aee63bbf1e37e8f49618ad20bd45967a912d8f25a95e03f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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