avista.co

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:d6:e0:7d:96:46:de:89:c1:60:36:82:74:8f:ea:9d:d2:66 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=avista.co

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:d6:e0:7d:96:46:de:89:c1:60:36:82:74:8f:ea:9d:d2:66
Serial Number (int): 421567969404261239908600022582066730095206
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 07:02:0d:5c:a6:d2:4a:04:ce:98:4e:2b:6d:db:53:cf:f4:36:2b:97
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 9d:e7:21:c9:48:5a:05:70:83:23:34:bf:95:e7:01:dd:d1:c4:3e:45
Fingerprint (sha256): ad:1d:79:fa:9b:db:ec:41:67:83:ac:9d:54:e6:3f:04:63:58:68:fc:56:39:91:df:4d:36:b4:00:cd:14:b7:ca

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate avista.co

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for avista.co

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

avista.co

Other certificates including the domain name avista.co

(limited to 100 certificates)

Certificate

The complete raw certificate details for avista.co in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 421567969404261239908600022582066730095206
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-30 23:02:01 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-30 23:02:01 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'avista.co'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 895503276194360276934598373682797237943049317554975916553232910456693357799947109624257055907243262139693145018517195622359004045537965728080878817976993323194368773245652447486213669215150702624824898118629819869506552388858085435911010203058630955254333638439988058321390545202271791446300426807255735497499556588711020597079103157612828256906820424781286959801722306197972600976086081764308126173769960859201694174240732471526394749432485335791041638005118273307610110729090533512754429908979875266359336243827387054704082905761170677193522405510378999089796929482915509033304054377914239667131961705865246414532334792167188459168328904707887112904556605902029831392135768460512797988578466861281595654960804551596477265875249476058783175671375515045023677586408197126077513101939654670659428802604254713366686314143926736382257000960144917624605889050217673953487661312542510402253434978211658181922576042970137719215545045472994147401132138088039102720181069170101829984274807595796509814941701341850764010105085817041459409228554060122759028179422855377364802859568905291643847214780990141487322735366010383019440050989335720795904075688272763277899532766133096065268519035196584484615866214571732263089963594625636253410522489
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							07020d5ca6d24a04ce984e2b6ddb53cff4362b97
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (13 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avista.co'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc5600000168a1365d6b000004030046304402207a71b358bba6ff7cf6ed59e71136ba7153c85f0fe44573767543d8356539da2e022058373c0d04aa7cf59146f2b78188bcb2538f9324d244f1cf1445c6e7b8e670af007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000168a1365f3800000403004830460221009cb1c16d97863e81d0f51f88745a60ba8cd6166c880b7042d2311a28202fc0ac0221008e20494b3459cd68fbb836a655f271ed41e32aa4cb1f16d27e3421eafef484cf
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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