www.pit.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:52:6d:6f:2d:5b:42:f6:1e:cb:e8:0c:b8:25:81:c5:ea:24 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.pit.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:52:6d:6f:2d:5b:42:f6:1e:cb:e8:0c:b8:25:81:c5:ea:24
Serial Number (int): 289385474999228465644837160418657847077412
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 9b:3c:82:be:a7:1e:e1:c0:e7:a1:6f:b6:9e:92:7d:61:3a:20:88:33
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ac:48:de:54:df:17:96:87:d2:76:02:1a:77:f6:77:7e:b2:ec:68:23
Fingerprint (sha256): ba:9c:41:c2:57:61:16:a3:07:82:c5:de:df:0d:9f:a8:65:c3:e6:ec:64:e7:16:f8:6c:74:04:68:53:3d:25:fa

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.pit.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.pit.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.pit.org

Other certificates including the domain name pit.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.pit.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 289385474999228465644837160418657847077412
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-13 09:14:06 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-11 09:14:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.pit.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 706490426364656947745495392398705114663006414482808262343668128641834839533405814144121554253258702001930680235379891930409008703607630612087502136815670551585514521397144337938821467420225599363072870793420187318241550516020798477249770657978047225960771811934495566443226283913386934496568417543552324998794329110787549392745174377878174868197234270239066670456804108015091639230858861610424622708373376790121109193711012106325784223092810547194905095005920201644689627245956448094422351957377608700113452210824403445048640106182790358716152170041568710406231644145079438584547561704808587798130862932955860801505530928174415478660537684760340633059015638804213429933648434728663741977084254450934639042159284029319852836147171429223723488998774336934284222710415293990128946350002053736179465041507857688939888272087917486063310868444995559382379808960979838962689223230924351226341834782863969618208009108595536406535854551603877265977652593154399692837884721643687732084681265661098951940326369755067250397062489981213639486661239633908623605757499805895200757816392736161260726601482399569621979372856223939576333111493494268662092862102392923990800743389834880177804166300375513719470412402626967628422706287206362949661125537
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9b3c82bea71ee1c0e7a16fb69e927d613a208833
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pit.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016b50548d8000000403004630440220109f8c2cd1d3bc3cbb0f2aed8cb14b9e64d9d0c0246d61fbae1a68d21cbdd5ca0220608e73bcd24d9d19dfe68c09e865c3f1cd8c0c6af6b29312e27ea301101b3abd00770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016b50548d750000040300483046022100d59cde9db3879f6232ebf1d155eef2c7763da730cc90db7a764604b3799631bd022100d6a6e507f7ac6076f8d500b1e1e2e30b6431d58649c20a7a661e2c3dd867572c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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