prestate.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:e0:68:85:a3:b0:b3:e6:de:c2:5b:88:43:4a:ae:bb:c1:22 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=prestate.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:e0:68:85:a3:b0:b3:e6:de:c2:5b:88:43:4a:ae:bb:c1:22
Serial Number (int): 337699041592647371057904158857475833708834
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: a6:f9:1a:a4:be:34:c9:cb:c9:d3:bf:a0:69:e6:65:cc:51:27:ff:37
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ee:2c:94:92:27:d1:12:6d:d6:16:81:54:9b:37:d5:13:1c:6f:2b:96
Fingerprint (sha256): ba:a1:be:2d:34:8b:3b:83:e8:44:89:9e:e9:33:46:22:f6:6a:9c:25:a7:96:3c:61:52:ed:7d:a8:6f:55:e3:56

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate prestate.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for prestate.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

prestate.com

Other certificates including the domain name prestate.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for prestate.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 337699041592647371057904158857475833708834
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-29 13:21:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-27 13:21:30 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'prestate.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 875383913256339147487082766427074021804889895739626183405912167066021022045927033544375854155343558057749501059277074630951350283337784102261360588259626920387492351596419828895122019607986686851718788656562432218629491636120014742681943107078449038630044511899355436437650819874957214704425461677057942078092247788830398064652045525679846490370606424028364856939990525781869373425634807948994683902483028692533542875154156067148794857094153506846073607216306774934210216459896904053216394775588854252898110489143542596749069453277760700780716481698621175048281100325110770481974558171697887968267178135040027267090727516390257522361508858406755978309762259224317336017606545027413744863327177225336700364782670189272169707170794955952846843429846112530888943275551244726190217924540851963751411303750729107171559520563438918198149302975306926955982627102001020383314315751623671949066770789146427954905754974260432217104751640640536050045342960649361525293428966190697667818442135275817063239067438315217830146983965366877637239917573272966480156662620843760961480077076686734486895243024903606242739200665184049756444920749636122282548357352751855697704641750245012498355159396124291426148636220355418287544565171497112874045396047
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a6f91aa4be34c9cbc9d3bfa069e665cc5127ff37
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prestate.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016eb789c6b00000040300473045022100a7ba1c52b0df1d91860644d948ddba5773098608cdc49b5d92b819059eb5a33202200b3f0c5865ce6b65a7bbf36b6d940fc2cdd106c177838e109245cc14f1de03f800750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016eb789c6e4000004030046304402204a5026e2668a0615ef8e6fe998b3dd5c7c8620c1a527e540bad48cab78ae5226022034352c2d566c6827f3100ee18961a55539caee6b91ebabe10f807f08b54e09bf
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0074572dceb02522ec87bb4789741041fe59e87951808b2b1dfa176bacad4bc5b9f02e55a429000c594af4a5ca45c18e421a77d6b16506b05044ffb0578150680dd74916a4b6fd91ebff8cac5c3c96a6719ab51aedda42dca276d097c2462b8dbd9e1022ab28a489ba1362a68d074fb1522af8d1c48ec279005f9f624fc341db78589fe59f7434bbec5bca2f43c0d7d9fa489fe99a48892c0489815910deafd879e4f2eecad5b9b8353ec055c748dfbcf6ca7b4d29235f3439fb75f4b4b5320d9962f9101d20f5c635e95799bee963aef36badb7ea7cc56cf267992d9c37c6ca97fb0a3012cfcbffb2ce95d6143b7c714d7d983fd00c64b153a622a6fe1150b9f0