gudtoknow.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:96:7e:2f:3f:8a:34:e2:96:80:18:4b:d8:29:16:a2:16:2b was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=gudtoknow.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:96:7e:2f:3f:8a:34:e2:96:80:18:4b:d8:29:16:a2:16:2b
Serial Number (int): 399659226819344665248373774296604498597419
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: d0:e5:8d:48:76:9f:70:f7:0f:32:91:6e:ec:9c:f2:04:88:a8:46:fa
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 52:59:d1:b7:70:80:2f:5e:54:45:eb:50:40:a1:e4:6c:44:e6:69:06
Fingerprint (sha256): b6:a0:b4:44:ea:7c:4f:3a:99:b6:b9:c2:94:76:0d:4f:42:aa:53:42:b5:b4:28:38:89:21:9f:48:7e:c3:34:f9

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate gudtoknow.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gudtoknow.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

gudtoknow.com

Other certificates including the domain name gudtoknow.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for gudtoknow.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 399659226819344665248373774296604498597419
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-12 00:04:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-11 00:04:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gudtoknow.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 820445677927675976808551470057509783236077447944910474714375217419417992990835209339851851914249598315718612647779748518156165419084486133273412309829966728851417833602565404364591933906916801357465650688607101917051567329414940914194361032848487721814965456964072031545390005842651141729272004908382907822622248362707284333538315522560461370320412550921782427118281355235093572021983296326608620065277235464511786959697268421117691697147751484493276243499921751398312577115080514631711863384662261022412079206160214315427563802251745667910963035964306459768124335315849225627015342826720597244604056526735417514946189775859065519951640516081631724541461317097866777207180229938753501787576756446013371200047498982612252909881365776302609432276201461948581023733906775481870549515205967302067158307152731466482596993774395913461746948375487998290645432307523389176639717905507308267377496826620207565369718593745120688282025883024196052344649805111902160332727904329516834137248034780183298706572138831470593139972593305708650057309628393408323499952014951836030796444422905860041919745182295506234260638212654893199108766295716135375812837079691874610517178675640672511620680125040636731618524481660429250201839032606582523972538267
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d0e58d48769f70f70f32916eec9cf20488a846fa
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gudtoknow.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016ef7a298470000040300473045022100a720bb4046ec5fe99b84a383ce4cd93d2aa0606f216c5c929de972de03dea4b502206ea4ab83c420c358c1cd62128ce05e408bb711e16ab76dbd8f3df706522917390076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016ef7a2987b00000403004730450221008c99972d18b206892b40c7fbb4af2490a368efecd39beb272219e51dd13e6a51022068563e3fd7d84bad8bfb8525dd85b0cf08bc95ace90672c6fbd42ccc7e28f23b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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