www.avoidingmistakes.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:ba:cd:b6:a1:91:88:19:43:67:c8:de:0f:83:c3:54:25:25 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.avoidingmistakes.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ba:cd:b6:a1:91:88:19:43:67:c8:de:0f:83:c3:54:25:25
Serial Number (int): 324902818056737605491914552004412850840869
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 8c:5d:2b:e0:c6:db:67:7e:9b:41:42:38:22:62:a0:b2:59:bc:f3:34
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): c8:a6:7a:de:38:51:8c:c4:69:97:62:e4:81:cf:41:e6:08:7f:71:7a
Fingerprint (sha256): ad:fb:f7:8f:c9:27:c0:64:b8:99:2f:5c:84:57:8a:18:90:9f:ed:6c:76:af:4c:8f:2b:57:0f:7e:9c:6c:c3:9c

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.avoidingmistakes.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.avoidingmistakes.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.avoidingmistakes.com

Other certificates including the domain name avoidingmistakes.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.avoidingmistakes.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 324902818056737605491914552004412850840869
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-20 14:02:29 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-18 14:02:29 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.avoidingmistakes.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 761557039950385081072488227496775161584593479179536560259956481574703930527996261372362338812961938949716244554856963019339603204660434904038440969809115822590168016459583345267066837573795496426921890352527028186421893709949721558704586749357359146661082467732484504403681476689369179332054813540006359817640805966741430376497616088559693982891624604277949871834030416007991839300605459941511374793547809842614145085541394801758089171362470745216798114077858562318328880232464290306676390371477913383154443165705952804676824233966124477427135046844779378050646011821987863961849203219896124367143985381542500443378751433712763804711528525908789301737614417938511459114356174002936111613238415631947875640824509229486756029534112232381270082995674474446965024204252340120598707286416744633409101837146580640146130664216648298477250391644724395647514563989029168743231389694513381009054201713948668042588689150361953814169787962954640274173170189212314798363417022132310334892174801434551912492661896975702737263058685665982737965568234754882329293612830201059033417923504111179012737338715855397379281886997561805073142205078306856895524008957512919502586555298870478394049592682394219918598663304434790250333202222855940236858948271
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8c5d2be0c6db677e9b4142382262a0b259bcf334
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avoidingmistakes.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016de9b0ec2d000004030047304502207d05f8dff4f965aa59c7b02457e4f532a5d65e38ca718a43f52195e23265d444022100bb19d8c72c1ed7f1a977eb87aa5d58e286467979b8af4bc7796b3dd0817561e1007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016de9b0ec1e0000040300473045022071e363596ef0538c3e8981e87e0f252c5ad9d1b71d2a98b5d7ea17bd9d45cb03022100d9b3a22eb06b9555c09636a129e7116e50ecec86e71c383afc699ae690d8440a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00501462aab496f2541b56c5c429b569b60b2131ec4c2c347adda8f96e4e95bc28d7bc7499198fc8428fa805520f99344d6bbdf76e181f42bfe12f29d4ff53a5c38fbef2671ba414dab7f7eb8c7b81277d35d21489cfb2a9068b7dfb6933cee93226ddca1b23a7f5d7f969212ecb6917dd6d09746543d3d931457562c0dd2db95c10553409fe1613c878227834bbff2fbf45530d14d6f2efeb94ae65d37a837aa9629a9956b2a3650049eabea52d390951dd6f12f12b7815d425bc8da4121522647e16736fa24311490ea6da6b1918a0c553f08457b61efe4f1af2df77ad58ef0d2c22e3c2401cfb38e3c407968ed55566726df72f2270191c6ff638eb7800a2f8