para-gliding.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:9c:cb:c0:da:99:f2:7f:24:48:0a:46:c1:a6:23:c3:60:3c was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=para-gliding.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:9c:cb:c0:da:99:f2:7f:24:48:0a:46:c1:a6:23:c3:60:3c
Serial Number (int): 401804027604610815033922739543590572351548
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: f7:68:ab:3d:44:2a:b6:0c:45:e7:9d:00:ee:15:a7:3f:f9:e5:57:37
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 07:1a:a0:ce:7d:db:29:cc:2e:6a:b1:b5:90:b0:c2:52:ab:5f:18:73
Fingerprint (sha256): b8:38:db:5b:66:c5:7c:b0:01:dc:02:d2:4c:50:da:54:28:61:3e:65:71:dc:6b:bf:aa:68:e4:76:b7:3e:2c:94

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate para-gliding.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for para-gliding.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

para-gliding.com

Other certificates including the domain name para-gliding.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for para-gliding.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 401804027604610815033922739543590572351548
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-04 21:16:41 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-03 21:16:41 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'para-gliding.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 1011106584280279140007543283765831143298523994502536859300257204162889876680745311399603557567016181203781536709487367619369034479185196986281702817699638972244226886144926914223737912094371347482040991203256537502742535084135322445869773259296278728103522729671114878158739866641879927935348744017715340942239602555472421370055085488944539781081185312806688657473744417244565646756605395219072420275992449077749296140399223218830524863752019662277836037471904228335682516242455660926541923288795374214628531033504264853806089796778322834056122167732572355561720052429432953868811663957755691448143174880698811198321816897520070135227996265160831150425067007425583376741231436854761098994272433820350712315964661118806226494767498900239831413516284673686667627560788831764054572651730535546053027563484993296040964126041023081911098677858203823035950238326018605271519678296114115684316574151199752991368476299310342911285772000800959699870747102686386032447176047831037408652988146695170607874427381205058361887774266356995589737156594226213691604494640218716379520304587170008309651735020514144397699583319709074917288803741134607581770272111203571806917326971382677289881505281586296051825303582848771528798372310827395548168203007
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f768ab3d442ab60c45e79d00ee15a73ff9e55737
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'para-gliding.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb273000001714744765f000004030047304502203f61d3f9cc542b42541a84b62ec0f1683d60e59b68cf297dca45fcb4c60a3158022100827a22c0dd5b9118bdf04c6a33351c817f73dfab7f0b66d888c1b5c9bc17c367007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e000001714744764d0000040300473045022100e6bc8bc3e88059eda95cec28cca851118cae96981751d5df61c6afe2e524c2f702207cd9b4e2c3ff21b2845ae784f0a3ea968a51d798a3f41a46e43d88894745d275
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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