truematic.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:e7:fb:1b:6e:6a:8c:fb:58:79:3b:05:dc:b9:cb:4e:84:3e was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=truematic.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:e7:fb:1b:6e:6a:8c:fb:58:79:3b:05:dc:b9:cb:4e:84:3e
Serial Number (int): 340275863212481592712112096294086613304382
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: cc:d8:d3:4a:64:c2:61:95:31:91:8e:60:34:9e:49:26:bc:5a:09:0b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 98:b7:fd:56:5e:0a:7e:3f:96:ec:f2:8f:90:3f:a5:c7:af:28:25:c3
Fingerprint (sha256): b8:ba:cb:9c:39:52:cd:35:69:a6:6c:79:53:79:12:36:88:59:bf:33:d9:77:25:62:97:7f:97:8f:f4:fd:d9:32

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate truematic.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for truematic.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

truematic.com

Other certificates including the domain name truematic.com

(limited to 100 certificates)
fantasticare.com
www.truematic.com
truematic.com
www.truematic.com
www.iwantdad.com
armaniwatch.com
worldcomposite.com
www.plantationtowing.com
www.truematic.com
renoprp.org
truematic.com
truematic.com
truematic.com
truematic.com
celinajade.com
sanpietroinlama.org
imeditatedaily.me
rogue-composite.com

Certificate

The complete raw certificate details for truematic.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA4z28Zf1NpzQPmwexvZ0D
qII50HdBMsY+Z2Ywn7xemfa9cmUWUakwf7LNvJk+I2D8VDCHg1TauQBby30UpEtq
N1M44Uv3iGZZPo6AR9lB1ycwRjITHW0GP7yvW9e8ZwnjhZzA2az+/mxRj9G6BSnj
0Vj7/QyMnXFme4AGrTLzYi968JpNdMN2Gx9MkuxKcWcSEdMBZo/CxO2ve4p0Rfxz
dGUqBXCZrvzjHiGRsquq3EAj8IgV8bTBXEdYv2PVNKxfk8u3RHoMgqIlzwVR0iyn
jTEuCv9GDSdWR8QpMBjtnUVXU6+0dMwRmEHUa8c8k4/GymGe9GfEA0BEW2HXllgu
SFV5eOTJROBWd1Ohu2smCfSQ+Hh2tHwGjdyaazVI50DPs6R5YuNSLEwk0B6XpYG0
ETXDCBXs6aHPWqOZFPFthl0oqiRG0JQ+B+tM4yNbCD6tYHQNY1FJ9L7rSUcL1Ryi
l2zByd4XHPPYYg/xOdvs4QzJLsJiUCzKwIQ7mDH+TKJceFLMbCjwE/C2//XE4n9p
LM1PbJfCKH3d1nyisR9Tzh03RKbuWpXZhVl2aAeF078FhiRTQ47XBxsAnvLO1doK
xnJ1NCwt04JAHOx+lRZWAN4SqFJ6Y1rnvPuEndMVnFK1WHW9+Z7qIM40AiurZK2y
ZFifbl/OGaMaP9VTseploGUCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 340275863212481592712112096294086613304382
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-12 17:42:35 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-10 17:42:35 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'truematic.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 927063034009512683182015696519403587285671435093167950573096247043576288012830375520604776555135798781561893650099946855536945101951130128744494286793373156700445551243099923829698733652318079871493343191531544894117162070688752705236435472503671065741923886863311395251053637659568953172498266170668193837710910112614868068970520377472245539922924837877558977136089181079552606326825307153890588746047322261520304930591497849251612335871004180653475009049808195452681564984152991361325043459355336166892012572801910758678351113486110949867053029810520412395892190230563944799764376900910489000352527225079237577052841922499193685481904332550528070140409742635913449967083538960936451413811561700869435281770561952603889030546788026738910496908850528827180304736428557711420283511801837962287937858904181246017231292170678355961179324959235058091729017994215020245060861967986911578529062839684306083063028103996733648921320968665060463929390638370460545610768881205600935352496834240470339002150101607606855725003801785951077409050569603339678662345660485842383110596785264553032849255170572611354290082094522114753156829397341870474692404073762485193707686262036427099266708780227321924369782071884650643884671388897980477312704613
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ccd8d34a64c2619531918e60349e4926bc5a090b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'truematic.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016dc14790340000040300483046022100f63e5fd019d57a38e86a0d8a013ef056b017268849ee7cea9f57962601a5b44c022100cf96618317a8e1972b2f257edb9c1a594ff719c36cbb61b291e311bbfc7bf1060076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016dc147923500000403004730450221008d4a012ebce35c466a63783de727cf79ab765dd36edc0e803d523502fc9bc4be0220493f43fe93dd964fb6f8854a577352002167bd89597e1bfb74aa30f0108cf632
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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