finance3point1.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:32:72:0f:04:55:18:d4:d8:52:2b:07:e1:3b:3d:49:a4:34 was issued on by Let's Encrypt.
With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=finance3point1.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:32:72:0f:04:55:18:d4:d8:52:2b:07:e1:3b:3d:49:a4:34Serial Number (int): 278502586105171738727341405824178532754484
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 08:11:e1:67:3d:6e:83:92:9b:b5:6d:c5:4b:2e:75:3a:fe:c5:ea:d0
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): d6:6d:f3:16:b8:77:bc:d0:66:81:34:d1:14:7c:09:03:bb:7f:44:0a
Fingerprint (sha256): b0:8f:1d:e2:8f:db:05:ed:a7:04:de:c9:95:db:bc:bc:12:80:6c:d4:9d:ea:3e:46:ad:e2:6a:60:92:6e:2c:dc
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate finance3point1.com
7
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for finance3point1.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
administration.finance3point1.com
administration.upslide.net
finance3point1.com
old.upslide.net
support.upslide.net
www.finance3point1.com
www.old.upslide.net
administration.upslide.net
finance3point1.com
old.upslide.net
support.upslide.net
www.finance3point1.com
www.old.upslide.net
Other certificates including the domain name finance3point1.com
(limited to 100 certificates)
finance3point1.com
*.finance3point1.com
finance3point1.com
finance3point1.com
finance3point1.com
f31.fr
finance3point1.com
finance3point1.com
finance3point1.com
finance3point1.com
www.upslide.net
f31.fr
finance3point1.com
finance3point1.com
client.upslide.net
finance3point1.com
f31.fr
finance3point1.com
finance3point1.com
client.finance3point1.com
finance3point1.com
finance3point1.com
www.finance3point1.com
finance3point1.com
client.upslide.net
finance3point1.com
finance3point1.com
finance3point1.com
finance3point1.com
f31.fr
finance3point1.com
f31.fr
f31.fr
client.upslide.net
client.upslide.net
client.upslide.net
*.finance3point1.com
client.upslide.net
finance3point1.com
*.finance3point1.com
f31.fr
*.finance3point1.com
finance3point1.com
finance3point1.com
finance3point1.com
f31.fr
finance3point1.com
finance3point1.com
finance3point1.com
finance3point1.com
www.upslide.net
f31.fr
finance3point1.com
finance3point1.com
client.upslide.net
finance3point1.com
f31.fr
finance3point1.com
finance3point1.com
client.finance3point1.com
finance3point1.com
finance3point1.com
www.finance3point1.com
finance3point1.com
client.upslide.net
finance3point1.com
finance3point1.com
finance3point1.com
finance3point1.com
f31.fr
finance3point1.com
f31.fr
f31.fr
client.upslide.net
client.upslide.net
client.upslide.net
*.finance3point1.com
client.upslide.net
finance3point1.com
*.finance3point1.com
f31.fr
Certificate
The complete raw certificate details for finance3point1.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF8jCCBNqgAwIBAgISAzJyDwRVGNTYUisH4Ts9SaQ0MA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA2MTgxNzM4NTNaFw0x OTA5MTYxNzM4NTNaMB0xGzAZBgNVBAMTEmZpbmFuY2UzcG9pbnQxLmNvbTCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMcl6NVotEOiAobmDooaTJZvJbp9 2YAFn7WNc8HVSjzdmBoVvuQjI3wCsMr0ohpo1Ut9svGMrj22AwBROMV1NAkvWVO/ H3iI1c3bXIfThW/dxpnTCRaCUCDiEwv3Y8cIslI7VQRnivaCyuadtqvyVGUbmsZX Wqd7PPgP2RM7coI8CKXz62lofTA18Z7pyaHWkkzR5XWU8pM7ZYJhbqCjJizNomNe +Lt6NXd75pwGhRK+LOM7SpOtPymr+vgTcC0vc+0rXOpoGkIbmtKr0UXmzjRkjBZk 1vzy0pnhQ9XKagLUa3sk5pmbmsgHM31Y13we74fIKiKn5QavSRWqWjRL97sCAwEA AaOCAv0wggL5MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYI KwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUCBHhZz1ug5KbtW3FSy51 Ov7F6tAwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYBBQUH AQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5 cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2VuY3J5 cHQub3JnLzCBsQYDVR0RBIGpMIGmgiFhZG1pbmlzdHJhdGlvbi5maW5hbmNlM3Bv aW50MS5jb22CGmFkbWluaXN0cmF0aW9uLnVwc2xpZGUubmV0ghJmaW5hbmNlM3Bv aW50MS5jb22CD29sZC51cHNsaWRlLm5ldIITc3VwcG9ydC51cHNsaWRlLm5ldIIW d3d3LmZpbmFuY2UzcG9pbnQxLmNvbYITd3d3Lm9sZC51cHNsaWRlLm5ldDBMBgNV HSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpo dHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQUGCisGAQQB1nkCBAIEgfYEgfMA 8QB2AG9Tdqwx8DEZ2JkApFEV/3cVHBHZAsEAKQaNsgiaN9kTAAABa2vifHIAAAQD AEcwRQIgVB0PlkrG74VCMI9agr+POEnmgjpZptwq93RAQ5STQYwCIQDjQYX7OOyC Hr3267v6K1e34IM1wvcPhwBOtDZN4I7BwwB3AGPy283oO8wszwtyhCdXazOkjWF3 j711pjixx2hUS9iNAAABa2viezsAAAQDAEgwRgIhAOzZ2xvtNMsOsDzhAKNzsbh6 fzLImcMME/JDyE/ECe79AiEAmXVWjK8HGmrhHsQLhUcMjoxnW4eHEECjH9dojVPe 1J4wDQYJKoZIhvcNAQELBQADggEBACya+xqNf+orsFRjG5jo+pV76wP7e09ZVnys sf+BVjdThpesUEBLhtdcfnHcWxMQkajGzft8Q74xcFRqmJCLFqwCGffGEI8smZTY eEF5jSwnr3Xf/26IH+0zd9GxjYmU9z05MnX7SM1kMSa8wllINffU/2cmejnzoj/4 STRLf0WjwdWAH/1Rbieu5MoImCyR1chuSoy1UzyxPqftNBZ4dFfh64ar+AOsmP3P 5Qz5AzOPCcazZ9STzoxm9MxmALOK0h+QEKQar32vGCd6vku8T4+52/x4qTuDSiFV aFbIjt0wnT392u3GZiSntI6TA8A7qFvL0wfn9qOshf46ZWrRtA4= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxyXo1Wi0Q6IChuYOihpM lm8lun3ZgAWftY1zwdVKPN2YGhW+5CMjfAKwyvSiGmjVS32y8YyuPbYDAFE4xXU0 CS9ZU78feIjVzdtch9OFb93GmdMJFoJQIOITC/djxwiyUjtVBGeK9oLK5p22q/JU ZRuaxldap3s8+A/ZEztygjwIpfPraWh9MDXxnunJodaSTNHldZTykztlgmFuoKMm LM2iY174u3o1d3vmnAaFEr4s4ztKk60/Kav6+BNwLS9z7Stc6mgaQhua0qvRRebO NGSMFmTW/PLSmeFD1cpqAtRreyTmmZuayAczfVjXfB7vh8gqIqflBq9JFapaNEv3 uwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 278502586105171738727341405824178532754484 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-18 17:38:53 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-16 17:38:53 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'finance3point1.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25140116562563461104109412571947840604580306089199608537603257230784912923158885224362536010594449935898367516348122244917910932470913925811453508726322886046785627617489501666725237508322886932882020560948975694812663288287560934350829079134362018305148484129265797430162319072352368484776490807316639490648027328157409102277167685229550092436257194345962822987283769776984368985247014574141135991574838004661927137896885047380009929621378869589962152633469432471669733621191568849063583110469921923889694516273243007832247149769158993541264585654641531740445095456361841124710167929106330944513262085811919802595259 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 0811e1673d6e83929bb56dc54b2e753afec5ead0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (169 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'administration.finance3point1.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'administration.upslide.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'finance3point1.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'old.upslide.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.upslide.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.finance3point1.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.old.upslide.net' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f10076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016b6be27c7200000403004730450220541d0f964ac6ef8542308f5a82bf8f3849e6823a59a6dc2af77440439493418c022100e34185fb38ec821ebdf6ebbbfa2b57b7e08335c2f70f87004eb4364de08ec1c300770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016b6be27b3b0000040300483046022100ecd9db1bed34cb0eb03ce100a373b1b87a7f32c899c30c13f243c84fc409eefd0221009975568caf071a6ae11ec40b85470c8e8c675b87871040a31fd7688d53ded49e . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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