theramagic.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:9a:17:cd:62:fa:6e:ee:e5:38:c9:61:3e:99:44:bf:7b:e5 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=theramagic.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:9a:17:cd:62:fa:6e:ee:e5:38:c9:61:3e:99:44:bf:7b:e5
Serial Number (int): 313771980973381829962296679744323006200805
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 42:e3:40:2e:7f:c1:e4:77:50:ea:73:20:25:5c:a2:f8:cc:7e:19:55
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 4f:66:de:0e:d9:da:19:fd:45:27:9b:fe:5a:cd:c4:ee:1a:e6:2e:17
Fingerprint (sha256): b8:de:98:7b:6f:3c:8d:07:33:7b:98:5e:63:1c:5a:a6:f8:fe:44:75:58:4d:8e:1a:b2:a7:27:71:e4:f9:3c:6c

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate theramagic.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for theramagic.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

theramagic.com

Other certificates including the domain name theramagic.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for theramagic.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAy2f4KGy9Y3wFFwxeikR+
eiIXI5M4fKv9jfEgOpeW5iskjgtSw/tdIBO7rri/D3OOiM1RcfyonKNQAgQPZ6lD
Cc0NiY7hvApEimbJxb98NFp47067NKTpxBCOONHma2h6f59OHO4FgOZooKznlh2e
Eu6XVt7KFCIVgPzC/z02bvDa7KsYrwItE9IAmYWVCkE+qkwxHazPUgS4Ni1XOhL5
S9YK7rzJy3hZTPVLpFRgs3J+pxEzWoXgcHDM8OB0/OFNL7dkg5eds/OoLbBrCni0
qzqe9LPbklJeLgWhAWmXa+L8R8iWGejCW4RmaNS6jd3S+jRcf8O8fSVwGkYb0Nrk
4W6qJZwY7UAiwsvGXP+vJTi/t4cvushSVkOqBFiOFIM4Baz2omA3MVPHKLYZEkha
Bn8QdWGRD0ButU6aW9FksajE40tqRacpdUS0Wo+ZoJQortCAyHOuYdUczIAJ7k/G
fQWakFI6xR23zhWhz1f5vmeIr2S4NaaA5HkSPcWF0iLj6S2L6oOwFA8fdio+shS9
g6nEzt6nIrdJIYzibJ43/vYTsWXniXHGSvolqGbW7zzHijfCk2fba4cptRLKLwJz
wUK9PpHuhGESOm1mmCyiEYX/srP7oiq83Y9e76VYW/jZXResYjHvtqOxf/z79+S0
37LkeBcGErv/kMZEKD6pa6cCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 313771980973381829962296679744323006200805
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-12 21:19:04 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-10 21:19:04 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'theramagic.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 829824613037210355700299090514077490354663253257405875309503885104769257393471160549996771877615122479236528165271319364470492166512695747405130193518190236221134479851455971133349610712169734464216995267020997823656744266301039607679059472902255480660098080697892312509860568342133688694573279077747928471837256029184886720475969329347708380377575313525952079450845571264829721249779207618731828654616879625450974613121791118232664801283242747556212886329145918384591699356907131137365504612709124619235654509575556663596600465258723009235913036002292634564821098568599959866788027121403149165206455415146429169232423913984374853564207182685628180222750486719967097622423917762943737258852596598239996735835525130616478403805551680333413550078909726482577397995829929977854682540509398920865375242705965594175213310102169387639220723297520433851347042519598960429514116680536901261406153344212775079228229009547367123862535419072087610912123113980149639788913628767471323249767237209349662360205355684703941457719636496337549407925188546309674630767135249921616710755411965188448161068216660667551443090134637817867204089431918484325581087447721838549579484490034624848775492164667886421294603907838795157589849615009230277034208167
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							42e3402e7fc1e47750ea7320255ca2f8cc7e1955
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theramagic.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016dc20dc228000004030047304502206dfe98393d9d7388152c876039d66078d663c34277d77ad1a403a6b48444f7aa022100e42c4cc92381540ccff7565b518a6d81e1cf06cd21e6a86f7da94ed0f0a4f3d7007500f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016dc20dc2340000040300463044022012b3fbc34cd83fa77a7aad069c5438e98095c00ae3239f1d698a039d442c007602200bfb074bb8f44ea2c0b624d6ef5de7b111f62ecb1be0509829fa93866ab122e8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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