css-weekly.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:1d:2c:93:14:5a:66:13:2e:f8:2c:3d:ea:ca:6e:40:71:8b was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=css-weekly.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:1d:2c:93:14:5a:66:13:2e:f8:2c:3d:ea:ca:6e:40:71:8b
Serial Number (int): 271264296148251013660095111058610274201995
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 3b:28:b6:ac:85:2b:6f:71:3a:06:c8:8d:e6:5f:a0:e6:0b:0a:5a:be
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 49:70:1f:9f:39:aa:41:99:2b:1d:3d:ca:4b:b4:5e:f0:e1:2a:13:79
Fingerprint (sha256): bb:a7:33:bf:c5:04:26:42:c0:00:81:cd:d3:87:f1:c9:93:c0:72:e1:39:ef:4f:33:39:fe:37:30:89:fa:c0:7e

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate css-weekly.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for css-weekly.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

css-weekly.com
www.css-weekly.com

Other certificates including the domain name css-weekly.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for css-weekly.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGajCCBVKgAwIBAgISAx0skxRaZhMu+Cw96spuQHGLMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTAxMjEyMjUxMTdaFw0x
OTA0MjEyMjUxMTdaMBkxFzAVBgNVBAMTDmNzcy13ZWVrbHkuY29tMIICIjANBgkq
hkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAr5jwZQApAByXC3F9H47hYhzboJ1tLoWD
i4fKAfo5QK/dXvwHkWG23EPzAD9Y1/aGRvcJvQFa3fu8bGD0CVN5xF9bJQNQX9VR
6Qiy2ksjkSH5/0N3gThihZfuqcCcP0/6ZjwuIuE10422LpkikIG9fc5QDJd49XSx
0evwewAd+xvlx+rVadiD/YX8YnrCSZq/K+aPCzkG8ziyLdTkSk1dSZsRDAsykFiH
F3fnDNxYdYtzhlJYv4+hlTeH0dDfPiCnPrTIUclcpC8vyNibp1ynTzxME0zjgiLN
NdaflSPohL2GO3Gyr0EdFJ+EUv4YPKaFfmU9rl2fV8uaRHhWFz45/EQFy+O4JYbf
zEZegXNceFmZvgKXBPFDJhzIy40tHCAmZmWP+aL4NOyzjZIgmFLG32UOgeX1wevm
LUo4Izol6bF5m17H2i2PXD1P+/V6Cp9Z6kkdGdIXlIB1i94BWB3OGnKqDkbBh7bx
EsWkVw1yXguJCqvj1zI+Q3pzFxfb6fvOR1ViH7iLxpOkbnNryQr1zPX0WK15DnX4
zwrz39fTHIS/18WOA5z5N8CEnr7UuSOd9lti9ZuQX4+FHnQqGf+klk0lY1uKIsD8
FwTPZZY0mGEve0N3QhKlxedfwDmCBTK+VYuUJtYLPm9oII0ywU7Wc6M9w/v2akpL
O+X6TpEiBw0CAwEAAaOCAnkwggJ1MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAU
BggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUOyi2
rIUrb3E6BsiN5l+g5gsKWr4wHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo
7KEwbwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQt
eDMubGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQt
eDMubGV0c2VuY3J5cHQub3JnLzAtBgNVHREEJjAkgg5jc3Mtd2Vla2x5LmNvbYIS
d3d3LmNzcy13ZWVrbHkuY29tMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQB
gt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3Jn
MIIBBgYKKwYBBAHWeQIEAgSB9wSB9ADyAHcA4mlLribo6UAJ6IYbtjuD1D7n/nSI
+6SPKJMBnd3x2/4AAAFoctNOlQAABAMASDBGAiEA75As3FvPP7n5pGi1rT103UQr
NKvatoPPGTBmKGAH8rkCIQDGhRyP29ysDnv2oKabwoQcbtWAEjYTkTQV3JRteoEk
6gB3ACk8UZZUyDlluqpQ/FgH1Ldvv1h6KXLcpMMM9OVFR/R4AAABaHLTTusAAAQD
AEgwRgIhAL8okQKZxc9vA7ietTi9OtCGHhskbzHs08Tmd1DjkwkYAiEAg/BOBUol
p2c/pNzVP3RylncZLKjOJFcww44yIwps/d0wDQYJKoZIhvcNAQELBQADggEBABHz
ZWo1pyXxi0/zbyztX5NsRcKK6xGUD9bqNCbD2n0yIPw02fTbqwsIXZaZE/hrmHIM
lHOwHniY06S3bMtvZG1WJCj6OIjl13FNRzxLOHZN45N7ejjyIo+fEz9BLw8KiptL
Zt86cKqFF9RGuD1tdGAQs3VSiUFottip5vi+ncT4quqAaF05mX5/xArXACWYNR6R
QptZJue8/rG/VFqH1u6JYWLzvNr8aHUXkXAmk6ev9IcW/TI9wZ8uT43zAId/ACTt
5tbD5ZVEiGUU6fc3MGX+7vwBRPZpAeme/D2xJTfvWazgfyimhSTBnjL4FxMVhfmd
1nfQrvKJNivSdMsbQbI=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 271264296148251013660095111058610274201995
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-21 22:51:17 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-21 22:51:17 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'css-weekly.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 716374965231588743951173342827252431386603305547017055524209268532043089984482756585936949310891714721847295714800111844266668824791639155954449195615260635757552752924802377494459306734804683575997456097578391398875420051648756304252993422886374127833501914036020035433504368143975141807984486107552122039876065401509443167526451511402171045985444854209856234144589286157242604542738758154643311365769838201649150338941499250346763603254793881383052180752538803986894766527296522803727510420649942846113841636333192459487550374333890591489833786624197176916370604701123770085009125987382330472797707048589249923134316570854173310902963046935778157861002152395454661754937292247463749830886439689398338189917483708810959274537404867486652614125684727868816651309913207052591632759308792164895198034691608393621885510541408983270429373499969754772162622839428302422324862501905633700813925506671739324993475364428528002937997508984358970447534200842303145455365291650146892730024136918548586172549148065001485654049704393723502318100702651198969777634747642053427668979500961756441032522369358940426506789702480659670823419465578993803000727444933717256627851229282976234751844870567802334669368069390149552041850162945499027600443149
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3b28b6ac852b6f713a06c88de65fa0e60b0a5abe
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'css-weekly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.css-weekly.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016872d34e950000040300483046022100ef902cdc5bcf3fb9f9a468b5ad3d74dd442b34abdab683cf193066286007f2b9022100c6851c8fdbdcac0e7bf6a0a69bc2841c6ed580123613913415dc946d7a8124ea007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016872d34eeb0000040300483046022100bf28910299c5cf6f03b89eb538bd3ad0861e1b246f31ecd3c4e67750e393091802210083f04e054a25a7673fa4dcd53f74729677192ca8ce245730c38e32230a6cfddd
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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