www.astrid.co

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:42:8a:47:f9:a4:36:b9:71:2c:dc:7a:69:99:3c:51:58:2e was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.astrid.co

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:42:8a:47:f9:a4:36:b9:71:2c:dc:7a:69:99:3c:51:58:2e
Serial Number (int): 283979301191888299229543998336223482566702
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 5d:ae:5e:60:9d:91:38:c4:47:14:f8:36:ce:a5:12:64:80:e4:3e:bd
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): c1:5c:62:0d:66:8b:b5:72:8d:ec:d9:a3:48:09:f4:5b:07:c9:f2:47
Fingerprint (sha256): b0:c6:64:eb:86:cf:dd:a9:85:f3:a3:f7:a0:08:6d:ce:57:57:e3:04:25:3a:1c:7a:7c:e1:ae:04:4f:c9:16:72

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.astrid.co

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.astrid.co

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.astrid.co

Other certificates including the domain name astrid.co

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.astrid.co in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGUjCCBTqgAwIBAgISA0KKR/mkNrlxLNx6aZk8UVguMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA1MjgwMTMwMjZaFw0x
OTA4MjYwMTMwMjZaMBgxFjAUBgNVBAMTDXd3dy5hc3RyaWQuY28wggIiMA0GCSqG
SIb3DQEBAQUAA4ICDwAwggIKAoICAQDD1QicudUYzYs2qZW5ea0uO/JCnOG24pr1
XHTFjmt7dy7q4JZSis8HeBbN2HM7dKJE15HlNpUQuEPhmj87mdzeEW4Vc4DWzsJe
5lS0jZ8ZOSqSsj7aYz6vAuk7s4oHFO4sial+pJYjyhzEY/B8CBNXKYkin7q6rVEh
qYPnnft6gbINNcv4czki6TL7VqTwLcZbHO3zGJINuDOrZLGhIbvno4li+bOBObIj
E/8BcABQAKoOeBHsEVD8zpUBWLtnu6Dd73OjPZhybxO5ZLL6BqUJ4JBrQZmrP8Ux
I3MyeHRGovmzicRiGmEk30xxc5uihXrhCJ9rNb7pc2t6wsIABfWA8U7Jj6jovbRO
84Gbx82YnoJiGoPbL3CpKi6RpUbv88gKhL+HAWQ5jCCdg9iD03V8Ie5GhJ7OP0IV
uy12w772OeO7V5kJxCG98dpTZ+aovdzk3WxAWlgMN2xx2kLn10NOwiGLCiFrAnfO
d1tr9qAeGRMILx/yWjD6gX/P4br6Ainfd7+zjrZNH5JeywnWevxyDHwuvbALftdt
4p2z0WXtR7ArBHmo3qsWZb8BCNmaFxhtQltipok6GRT0GYl+FvB/UmgqWZymeM2f
g6fsvtO7oI7q/gCJp0Xn1rBLt88j0uJrhwhaxGZUAcTpj5X6P5ImQVqMzbcX992m
vDDu47I3nwIDAQABo4ICYjCCAl4wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQG
CCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBRdrl5g
nZE4xEcU+DbOpRJkgOQ+vTAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86js
oTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14
My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14
My5sZXRzZW5jcnlwdC5vcmcvMBgGA1UdEQQRMA+CDXd3dy5hc3RyaWQuY28wTAYD
VR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYa
aHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEEBgorBgEEAdZ5AgQCBIH1BIHy
APAAdwB0ftqDMa0zEJEhnM4lT0Jwwr/9XkIgCMY3NXnmEHvMVgAAAWr8Rk2QAAAE
AwBIMEYCIQCT+BFOVwfv+RSCLhxq4qZEXKEWM8mJI/BmgdTP1d58GwIhANixevaQ
FJgBGCYSfQupsfOqLpOXPmgorq1KbbaKKnY8AHUAKTxRllTIOWW6qlD8WAfUt2+/
WHopctykwwz05UVH9HgAAAFq/EZNrQAABAMARjBEAiAx8Ro4H1H1Me5lw6s6dkOA
pux3ywxVM9zzW6AKgsFkLQIgCWzINAzpEwLjYGje5YyWJ9EZ+Iuw2agajMUPxbnt
0xwwDQYJKoZIhvcNAQELBQADggEBACfXm7bYkxeoM581y0kKSUz5EQt1hLrr9WVE
8T7pxURSzCgfCFh8t431qq+Aruqa3iE2+5ACz8l3n4m0OgCA6j1T6WGsPDLrcX+a
RmdZ86lrP1xueYpUh8liqdXQaFBmUl2cCg+aNfd3RG0qErKHYyzXHX/RknLLR7xC
61BxvvPvsihBJHwhd2KAdrp3c41lQ9GKRwNxEpZWLAh/L01t24EHqRX7gA56UZgH
5p01VOsHpF+sXu9sWoVtDQKhAZXHdwZou7nAlKwOE8/VdJTMKkoiJN+DM7Wdvzja
OCAEWTSI+APlLz8OeO7T18eVlzVK4FDkazWapY5PQTEU5JROC74=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 283979301191888299229543998336223482566702
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-28 01:30:26 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-26 01:30:26 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.astrid.co'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 798925520731191556127879173357836123875212657978750633109887847874858598310667778288922482978852400841638114987038704986747715522532802241092926707742832184898347249370207900996994960966474030776629728915797138985911931471907404260307965826802027118012010980600686513699313199154721022465276466149005769009403562750306475488221478985489317404077510869147714921574269357952214645087925871423738912908117250757689664062274662581339611092981002580321171430002173976579041092728962936564773244987353654705962008904434982107343893442906861369287871962441546406447326557872014582635795291315996108359310898988708776173310734248255599030693689744454735439360125778680827751045492939173407880332529432977335616573504140154183937905653271656659616794313719942498459233734212293822890958357424565305112589827928626410681501936395801923248362708115776478690266941057230183651302179530267790752415048739459575205054557895618485546725248440551639370181193073840414622272805880447561776616632721381300967011349002603515493791547346369611392835229673721591417414819011807614095710439475040321561343643337127369324571960141435485744579344306171786672980575538673786466664739659057367994007850448099562677015749485862783704148570774225634476000688031
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5dae5e609d9138c44714f836cea5126480e43ebd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.astrid.co'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016afc464d90000004030048304602210093f8114e5707eff914822e1c6ae2a6445ca11633c98923f06681d4cfd5de7c1b022100d8b17af6901498011826127d0ba9b1f3aa2e93973e6828aead4a6db68a2a763c007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016afc464dad0000040300463044022031f11a381f51f531ee65c3ab3a764380a6ec77cb0c5533dcf35ba00a82c1642d0220096cc8340ce91302e36068dee58c9627d119f88bb0d9a81a8cc50fc5b9edd31c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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