arbitragealliance.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:dc:c2:3a:56:28:60:1f:93:15:00:6b:69:4e:7c:3e:5d:f5 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=arbitragealliance.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:dc:c2:3a:56:28:60:1f:93:15:00:6b:69:4e:7c:3e:5d:f5Serial Number (int): 336457151649773371747992677465369905880565
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: a9:b6:e4:7b:f9:65:e8:00:11:be:97:cf:31:81:0b:20:e0:5b:0b:d4
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 62:58:8a:1b:a0:e3:76:b5:f9:53:7d:9e:97:76:dd:38:65:fd:46:f6
Fingerprint (sha256): bb:79:05:d9:ff:6f:b1:e1:28:09:06:39:e9:1f:2d:c9:bd:6e:1c:49:94:56:75:44:25:cc:3c:c8:7d:31:49:ed
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate arbitragealliance.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for arbitragealliance.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
arbitragealliance.com
Other certificates including the domain name arbitragealliance.com
(limited to 100 certificates)
fundsof.com.arbitragealliance.com
www.arbitragealliance.com
arbitragealliance.com
move.cool
tekconnex.org
darma.vc
www.arbitragealliance.com
livingwater.bible
saintjacob.com
liquidproductions.media
usc.mba
sovereigngames.org
faqanswer.org
renewablenaturalgas.com.homeschoolclep.org
arbitragealliance.com
canadianbiblesociety.ca
quiz.simplifiedfor.com.trophies.cool
shithead.world
www.arbitragealliance.com
arbitragealliance.com
move.cool
tekconnex.org
darma.vc
www.arbitragealliance.com
livingwater.bible
saintjacob.com
liquidproductions.media
usc.mba
sovereigngames.org
faqanswer.org
renewablenaturalgas.com.homeschoolclep.org
arbitragealliance.com
canadianbiblesociety.ca
quiz.simplifiedfor.com.trophies.cool
shithead.world
Certificate
The complete raw certificate details for arbitragealliance.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGZDCCBUygAwIBAgISA9zCOlYoYB+TFQBraU58Pl31MA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDA0MTEwMTIzNTJaFw0y MDA3MTAwMTIzNTJaMCAxHjAcBgNVBAMTFWFyYml0cmFnZWFsbGlhbmNlLmNvbTCC AiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAKkGzCLaXAK+BwHsag9PuFFS PQL+zTH9pbebGq8KV5NeYPjFl5pY91L6GaU397VNZq6b/uG7+9BXGU16ousEaz+x NZeObZ2nHtRrM3IwNqoxvr5o/YBznpZnc8+LSxR5PDNCaD6ETAjheBabmn1qxPVz Sv900EcvqvqEiComsSt3bqcg89FSk1U3dNMSh5Fiq8+RzmeuUdyJaHvUkMLol2O7 MA1bAVeCTMKo8FspMTP1rAfczJoDYQNzhKmDzJfFj6NorST9h+QSrgKnnejoYWit rDWynQpPrKtYkd4OI2obTs5C9CkTTwIxhXH1DzrhyOdqqZpOEoNO72AR8T3fAtdK JQOUVNUj+c5xUOmcpOFJPE8MhFLgb9P0eLFCSE7m54uM9tUFMoBuciIqmnJ/9I84 HQ8hDryT+2d9rO3MBRj/iBkoag1XYMG9SmzjZBf1xVEIunGn8VrTPTJgL9f7ex6g GBevhEmG0Yp4ozoPKZiGm4c2g5evokg7trV/+7pRQwkN9DCQjwFGBRt8jptcGmRX 0x+70UC7m+J3QdjXdbza6fvdOHU+LgAFuFXSvGx1dAf6EdAKgSXYKEvIyppKAH8A X5HChUcQ7lXwl+POmC00BchBOsZCWzNas0qarTMM8TRa+4lCEGwumHb1nhfWZo2G TZ1+2idRB4gAx+0dBJKPAgMBAAGjggJsMIICaDAOBgNVHQ8BAf8EBAMCBaAwHQYD VR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0O BBYEFKm25Hv5ZegAEb6XzzGBCyDgWwvUMB8GA1UdIwQYMBaAFKhKamMEfd265tE5 t6ZFZe/zqOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29j c3AuaW50LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2Nl cnQuaW50LXgzLmxldHNlbmNyeXB0Lm9yZy8wIAYDVR0RBBkwF4IVYXJiaXRyYWdl YWxsaWFuY2UuY29tMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEB MCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBgYK KwYBBAHWeQIEAgSB9wSB9ADyAHcAb1N2rDHwMRnYmQCkURX/dxUcEdkCwQApBo2y CJo32RMAAAFxZwztTwAABAMASDBGAiEA57QT4pPfFV7Wfqn6dYWSXbC0Hvs9JHKo Xs4P8o/NGNwCIQC9E7bKIbNx54sGSekIT0RcWdP7mA4xWMH25YW6vMpZwQB3AAe3 XBvlfWj/8bDGHSMVx7rmV3xXlLdq7rxhOhpp06IcAAABcWcM7U8AAAQDAEgwRgIh ALuY2PmJzicBn3WGhQFBKOTGqvt8pLH541rNuvHOCJGCAiEA2ySRSIQrs2zEuVp/ 68FVisqsnWoW4DTv1WwDetC+HWUwDQYJKoZIhvcNAQELBQADggEBAGka4ccwPp0v /26MJAy0JyD4y5p6A+tSK2M1nSoJdP8Mp0snbOfMUgya1NF4DCwigJ5SntdWIEMV 8zMFDy10QE2645vmJ8kD9H1Y7aT+wR4DTKcgeoyJ0szSG6JEddr16UFaouat4Gpz O6cS80Ca0ZaFzvaVY0yEtD1Oxc6n4G0hj5h3/oUhmSQikIB2iJf1EZ3y02kBUcPX Vte+kFgxfSgnWaWxbZS9pN80yCoCO14WGb6NaKDHLIV443xqZ/DFcDII87Fsg2bt PcfZALL4WgGC5ataf8BBcF8nWiP1I6/PPKPi4n4a2lAiDgW72qCzL0H1Dm4aH0O1 MU3djPezKd0= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAqQbMItpcAr4HAexqD0+4 UVI9Av7NMf2lt5sarwpXk15g+MWXmlj3UvoZpTf3tU1mrpv+4bv70FcZTXqi6wRr P7E1l45tnace1GszcjA2qjG+vmj9gHOelmdzz4tLFHk8M0JoPoRMCOF4FpuafWrE 9XNK/3TQRy+q+oSIKiaxK3dupyDz0VKTVTd00xKHkWKrz5HOZ65R3Iloe9SQwuiX Y7swDVsBV4JMwqjwWykxM/WsB9zMmgNhA3OEqYPMl8WPo2itJP2H5BKuAqed6Ohh aK2sNbKdCk+sq1iR3g4jahtOzkL0KRNPAjGFcfUPOuHI52qpmk4Sg07vYBHxPd8C 10olA5RU1SP5znFQ6Zyk4Uk8TwyEUuBv0/R4sUJITubni4z21QUygG5yIiqacn/0 jzgdDyEOvJP7Z32s7cwFGP+IGShqDVdgwb1KbONkF/XFUQi6cafxWtM9MmAv1/t7 HqAYF6+ESYbRinijOg8pmIabhzaDl6+iSDu2tX/7ulFDCQ30MJCPAUYFG3yOm1wa ZFfTH7vRQLub4ndB2Nd1vNrp+904dT4uAAW4VdK8bHV0B/oR0AqBJdgoS8jKmkoA fwBfkcKFRxDuVfCX486YLTQFyEE6xkJbM1qzSpqtMwzxNFr7iUIQbC6YdvWeF9Zm jYZNnX7aJ1EHiADH7R0Eko8CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 336457151649773371747992677465369905880565 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-11 01:23:52 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-10 01:23:52 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'arbitragealliance.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 689568171715662842907225400150221033931962082634606382337253175099877011938188675670122571988935491765593465429844497028901253558679995060183275130565110780434458096444938428277935098454383444063635241039178717284426570885233673873432403436640321174506846236401673209040258649610698645299952853690969743411532685913311237128720643010298591132858479926751735157044063545961476790914033617339378900745865194115924728468664314900009803758527025958272190423912893554948168722541191298083082361827036950135715396654206860743575992102617980398561815529478439285500780926404860332035011254692023119749761325540091613197442441662087847211117580579273990047279663085806001097621082683236258225309923226900630373794797224905107695527730579196495861614192746390637259282099424294904829265292762629332792861601403440687804238431961484325082566782087536684246083398267620678899160198779975200088150963479425913154220197285645920325643654411426163405546463232612491674450266533998656730905615545092828140392459718675067265067357470929813482811310452342031815160855429503882786512984374191701959842185014950935310509069991699867188109823672603738070396024944533373453348216159679305701223770071392159764638386201941745129141985474364325766709416591 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) a9b6e47bf965e80011be97cf31810b20e05b0bd4 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arbitragealliance.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) 00f20077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000171670ced4f0000040300483046022100e7b413e293df155ed67ea9fa7585925db0b41efb3d2472a85ece0ff28fcd18dc022100bd13b6ca21b371e78b0649e9084f445c59d3fb980e3158c1f6e585babcca59c100770007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c00000171670ced4f0000040300483046022100bb98d8f989ce27019f758685014128e4c6aafb7ca4b1f9e35acdbaf1ce089182022100db249148842bb36cc4b95a7febc1558acaac9d6a16e034efd56c037ad0be1d65 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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