abagail.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:39:4d:80:62:62:85:4f:0b:cb:dc:4a:05:a8:b9:5d:11:aa was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=abagail.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:39:4d:80:62:62:85:4f:0b:cb:dc:4a:05:a8:b9:5d:11:aa
Serial Number (int): 280835969874929321488848285123811611578794
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 65:cc:8c:7d:5f:c5:f7:bd:cf:03:19:81:42:cf:36:18:e7:d6:42:50
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): b1:2c:25:cb:3b:ff:01:76:4e:39:71:63:43:13:5e:26:2b:87:f5:53
Fingerprint (sha256): be:95:6d:43:d1:13:0e:43:8d:a8:86:b0:90:32:e7:b3:36:63:cc:fc:37:83:01:1a:22:ff:e0:e5:17:b7:4d:1d

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate abagail.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for abagail.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

abagail.org

Other certificates including the domain name abagail.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for abagail.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGTjCCBTagAwIBAgISAzlNgGJihU8Ly9xKBai5XRGqMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTExMDkwMTE3MTJaFw0y
MDAyMDcwMTE3MTJaMBYxFDASBgNVBAMTC2FiYWdhaWwub3JnMIICIjANBgkqhkiG
9w0BAQEFAAOCAg8AMIICCgKCAgEAy7kPEWJigv16QCIapy2sDvzUqNJiyG3wU+pl
h2t0uI/Qh1kSLVMI6vGcvv38LlLkqisNrJIcMN8ptm8WHXA66BVFeMPU3+08ISe9
aI3zSopvwTWJoD57ynB6L3MebSXOsvMWrXVuE89vTt+npJfRW2snGfEmcp7bhY9L
KGE/jnjVZ8Qg7DFPswbGlYb4o5hRUscLII61JBtgEEPtKQAxZeiCbgnrmL+3/3AY
RdTEUcTvX6yZr+MsqLhMKRTYO7b3WrRB5zlJNZKHz2iNqGh69U2sqg31Vbd8AYG/
zdzvCHTW6hvstyjEXdWLhxZHDB5rCoduqyeWoLnHdNSb7mx/4abofhu7slRbB5Vx
Sxk8cHXRdEKmnxGdsN38qku5/1qWdXWaKPh/W9TDEV9ZeWau0K4azUhjI40CR0Eh
Lpq6nbUSmNJcdZnkvjsXeBbf0bfvQHr9GZ7M4EJRPHeE9Z91iYnThX3rXfo+qcc4
tdn1xbbnsKfkHg40PPyYTzlZHMa28WnLqRvysjsG31gvvcuCkK4E8G/SUnhd0rFn
KejSYLOAPw7MOO0wARPl6yhE711YJUk8nnU6pDaOQk8x/F9TdR9Oob139snSAp+a
YFSvqLSeBGZ9m1YGs3wPu+A8Hk3n+H5rxN/o7oc4hPQJJsMzU3j8+Or43QNuK9h0
u9VRKtkCAwEAAaOCAmAwggJcMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggr
BgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUZcyMfV/F
973PAxmBQs82GOfWQlAwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEw
bwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMu
bGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMu
bGV0c2VuY3J5cHQub3JnLzAWBgNVHREEDzANggthYmFnYWlsLm9yZzBMBgNVHSAE
RTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRw
Oi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB1
APCVpFnyANGCQBAtL5OIjq1L/h1H45nh0DSmsKiqjrJzAAABbk3zewQAAAQDAEYw
RAIgDlm72CsJWd9GG+zfkCBeTq5//Ly8btZv7K9oXVcgJC8CIAj6AkMscGTuyGba
7WXtGAHqXsCE9zJgQ9V4ovI9EjWaAHcAsh4FzIuizYogTodm+Su5iiUgZ2va+nDn
sklTLe+LkF4AAAFuTfN69gAABAMASDBGAiEA719gjtFoK0QNSWvhXQf1WbM1qRp2
vnXVL/2CBT2CHHwCIQCCqb33O6avWsHJUlcv92SGCqJm6tOMocp/Q83ustIsrjAN
BgkqhkiG9w0BAQsFAAOCAQEAFGfMe/fXVLExqQ2t7ovMqR6J2u5vxXBzXV+8om5j
SbuwkQFVdm4aWnY91RxlurHOzR+nzzCJtHVWcRIc6uMRp4hHs5NvU10H2BCj3yh8
uVz326e+XNXrLrV2fVUk4UBZykkhVKYoU6a2fpQTJDBsqU3JXUyDH27Kf+tNUSB+
g28sCDaxskWdHtRR36ttsmR7LqlUb8yJmt0wCWLIxLO+hEV9mPKZpBbcdZR3b4d1
v5uFFqjWa8aPW9MUjJent2aG6JjYHts6cqWjyptZQaHTbFtZFknw2niPhbxgZhoj
j0zPEdHLdmX8dPcWmRm4OeZWFr2CEaTY4LLEPT/IntGiPw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 280835969874929321488848285123811611578794
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-09 01:17:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-07 01:17:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'abagail.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 831116864075310112188375622421453467943181742436223279733542005819075007881947846856783175965344620272971460052820498720171747170148250975035627612872997829327100888377606562851763143548690933905491229761441594713790428944114795937408673030092117416147786906595717899903930618930362645014041102837230219574138567049035760122799349539835393940830770477178477161099518899741040244008891017953329306227969037121626732549420181588269187941341167675725782964650480369492251970596795540880089231969726208870925219387843263707823120842019839620178274927246925259632702588014254973751169984222283043409111676071384257865469861394656452084738818118472318500459997149479924977790376754651039908096556812473845119354349137199744840356588569993150771392892734437236873957571821162064864321630497363623844317529891330959789135088532946763586491070812925572904412764724569633306461035297814263391598692287063196943914545443148283830133759948502900441809932127768842930575347796608048448717590866725043105341801757477763699769306910728035409678683726325198639466798526071099661059023780480180704655307873585408096903946830224973427064362220933352541349688693882055304523911705695147102634127985108361225928183233855165602364671331998020400151866073
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							65cc8c7d5fc5f7bdcf03198142cf3618e7d64250
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abagail.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016e4df37b04000004030046304402200e59bbd82b0959df461becdf90205e4eae7ffcbcbc6ed66fecaf685d5720242f022008fa02432c7064eec866daed65ed1801ea5ec084f7326043d578a2f23d12359a007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016e4df37af60000040300483046022100ef5f608ed1682b440d496be15d07f559b335a91a76be75d52ffd82053d821c7c02210082a9bdf73ba6af5ac1c952572ff764860aa266ead38ca1ca7f43cdeeb2d22cae
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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