terrible.life

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:ea:c0:e0:ad:3f:a9:94:1a:09:c7:a0:e5:68:71:da:da:18 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=terrible.life

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ea:c0:e0:ad:3f:a9:94:1a:09:c7:a0:e5:68:71:da:da:18
Serial Number (int): 341219310018368073720068359327104137615896
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 39:74:fa:42:38:d1:09:1a:e9:35:c0:a3:ea:33:bf:53:b7:f1:70:7c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ad:5c:f7:7f:43:cc:c0:72:1f:3e:f1:03:4f:5d:8f:24:7e:0a:79:ac
Fingerprint (sha256): ad:47:db:51:57:5b:c5:98:ba:38:f6:29:16:15:27:12:1d:42:20:f0:4d:1a:da:ce:b7:13:39:b6:7f:d6:e8:1f

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate terrible.life

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for terrible.life

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

terrible.life
www.terrible.life

Other certificates including the domain name terrible.life

(limited to 100 certificates)
terrible.life
sni.cloudflaressl.com
sni.cloudflaressl.com
terrible.life
terrible.life
terrible.life
sni.cloudflaressl.com
terrible.life

Certificate

The complete raw certificate details for terrible.life in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 341219310018368073720068359327104137615896
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-11 21:16:04 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-10 21:16:04 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'terrible.life'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 780879397551513108536056678558413592253886143532979700630470630839133383387527898358450409607940746991836323453701008679198728708792970118054577898369965830195237982802586580713589728555198660286812211180452132030911865459644304985710545802144913383062098247384943502363450334281547907433616623320578473133329857975543201143018481152742304956507857589506988438837619228819510975336712718713482739015341657062669997431754804870684505714799522279564599090594821052901881251497483209262204599888588852996185111543570015845332450585335947861791561580002084446810535720986011238185594977345842598630456381645444544963220965408664762552423132605105004719084157287103109104976047796268129471398970362177745355794692773370230892561669703794014131718023534455575645883995767231476913055395687166207791916134953983442387297570886545168350403053295744899731542327487581373435890192628475517473371521456296970793161849682125996481446855639453714928857242805060629668227589825929028588593813725526737946342816475227930903057088138601003792321847307979789237190077634071678304814796034238548026298065362704473123652808838423698646024523668301609677649082111984385588747607006091244835139245738298220741947195902690159843422455797669782260409308323
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3974fa4238d1091ae935c0a3ea33bf53b7f1707c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'terrible.life'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.terrible.life'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016f96adb5210000040300473045022100fde7f7501b5719d8bda1601ed676a875369d748f73be965a5ed7246fc9bc60f7022025e6dbb5145a8bb166541bd5b128f0ef070817ec1eab16de57a046d8f5ba29a3007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016f96adb51c0000040300473045022100bfed4048f22efb7b382e8055d659aacd0629c714f09f1c92a14652136c5c829102200566babac9ab5757497598da4de289332a7edb7c735e914946dbc389001868cb
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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