contentiscrucial.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:93:4d:99:1e:c3:34:e1:e8:66:c2:e1:49:5b:91:a1:6d:65 was issued on by Let's Encrypt.

With 18 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=contentiscrucial.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:93:4d:99:1e:c3:34:e1:e8:66:c2:e1:49:5b:91:a1:6d:65
Serial Number (int): 311461511333691634545964940400991292976485
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 54:2e:69:2e:d3:a7:f3:7a:f5:4e:e8:94:cc:1d:b4:92:b9:b3:bc:d4
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): f7:ad:9a:49:13:c5:fc:a2:da:0b:15:1f:2f:df:5f:e6:bb:60:bc:54
Fingerprint (sha256): b4:a5:26:10:5a:bd:61:f4:ca:97:aa:23:2e:af:51:f3:9d:04:65:77:fc:bc:31:51:93:d4:fe:cc:7e:3d:b3:64

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate contentiscrucial.com

18

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for contentiscrucial.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

autodiscover.contentiscrucial.com
autodiscover.gfusion.com.au
contentiscrucial.com
contentiscrucial.progbuying.com
cpanel.contentiscrucial.com
cpanel.gfusion.com.au
gfusion.com.au
gfusion.progbuying.com
mail.contentiscrucial.com
mail.gfusion.com.au
webdisk.contentiscrucial.com
webdisk.gfusion.com.au
webmail.contentiscrucial.com
webmail.gfusion.com.au
www.contentiscrucial.com
www.contentiscrucial.progbuying.com
www.gfusion.com.au
www.gfusion.progbuying.com

Other certificates including the domain name contentiscrucial.com

(limited to 100 certificates)
contentiscrucial.com
contentiscrucial.com
contentiscrucial.com
contentiscrucial.com
contentiscrucial.com
contentiscrucial.com
contentiscrucial.com
contentiscrucial.com
contentiscrucial.com
mail.gfusion.com.au
contentiscrucial.com
gfusion.com.au
contentiscrucial.com
contentiscrucial.progbuying.com

Certificate

The complete raw certificate details for contentiscrucial.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1a9W4SCjQaazPRNnJ70
kaaDujbl8zOXdGNJ9ZDy6Hl98IrsgtMOT86whZd0mY6iZTh3wZQ6HrH5b5SvK7xh
go05SKcmgiV1wVb0m3l8n0kvm7rLXtXjCOmOFv5TneGm8zDHkxvLk7X3twSHZQ+/
TpALg39PyCCTVFXvLtdr3K4dn8+Nkzej+d058pDmxsyyIxM/qqEcmij3qkVb2dDw
eUAzCw7bwqhenM/1kcBtORWSd1OsOyEIbuj+asxxBrqnvWukU1HnMGSLl19iwKmw
HKj9L0Dck+5TFqpfDAL8zzVCQ0EVS6pqgsqF0UvQNYUZH4hu8RfkFNuKrOcGAe89
FwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 311461511333691634545964940400991292976485
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-08 23:57:34 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-07 23:57:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'contentiscrucial.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23649335957894757405535419474782973544975072982880030749826718201884840826427074373672381369084474340875758735950261387834233500715717173316422876524593383722012386445467455456440365631421360180864573486308890439863156602188559164990359566745162593677809825103437007124011798385141789928221893131030842687998158173314324094607866736862379769021738895059263920519357203291873335510476350656935043752655181231597516209956840161688418191803314227524491721875184822016877029109740713152706759517952978538992195698648546409618242433095950629811280206033696132439245104674358328707234597622281019351462790381109930697374999
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							542e692ed3a7f37af54ee894cc1db492b9b3bcd4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (482 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.contentiscrucial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.gfusion.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contentiscrucial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contentiscrucial.progbuying.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.contentiscrucial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.gfusion.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gfusion.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gfusion.progbuying.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.contentiscrucial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.gfusion.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.contentiscrucial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.gfusion.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.contentiscrucial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.gfusion.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.contentiscrucial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.contentiscrucial.progbuying.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gfusion.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gfusion.progbuying.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016ee8295b2d0000040300483046022100f0446b81c3d89d7a1ff2016fecd7b860c131e5b46689ec37aaa3d58a7864c207022100c373bcf35a6a727083bd7a6b50aa3d626e038953b6ffaa20e88c1106d51eb1f400770007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016ee8295b7f0000040300483046022100d3b6314c170f4cf662865ab33d80dc300e7ca110c6ddd6144e29d77fc665201f02210085a450f7c51f75661327023b2310fba5ee8df67abd75b5f680680683682041c2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0078c23739d2fc7e545b256e5623e4ff703edbb40762854202b6717356d3ec525d888f7611a13f7c6c0bc165deb74cff3b635de2b7d2c9725396d93ad1fed8582b4d764b61502d333e4ecfd925e2368c9596b733fbd30d7c20e60ac822ee890009455cc6e5caaaf51e91162150409fae68133c2558843b7cf960e3deca4745257176010380575391e23ce050ab10c7e7192bf06095a21af8185d795c8002d00fd08c8f4a3228660227e1e47bd52ed336f807114274ac507b598f20481fff6f732b38d5d321b1711453b81e1c77e60314906fe685bee17e78af4469df45e15b2a8cc17149c731a2eab86f5d6ba2494167e42f6e08909119a7fabb9f087e8e35be9d