notvalid.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:2f:30:fb:b0:02:38:70:29:ee:e7:fb:b8:04:87:75:7d:14 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=notvalid.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:2f:30:fb:b0:02:38:70:29:ee:e7:fb:b8:04:87:75:7d:14
Serial Number (int): 277395238820754029252272831446552486968596
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e2:0f:ba:24:32:22:af:7f:c2:81:e1:10:4c:a3:3c:6a:bd:72:6c:87
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): a6:3d:bf:65:64:53:d3:fa:40:d3:f1:81:88:5b:2c:53:c8:47:37:ee
Fingerprint (sha256): bf:d8:27:5b:f7:30:21:9e:c3:af:98:fa:6e:65:d3:33:00:96:22:83:c7:6b:63:7a:8b:6c:1d:95:17:ff:16:d6

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate notvalid.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for notvalid.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

notvalid.com

Other certificates including the domain name notvalid.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for notvalid.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 277395238820754029252272831446552486968596
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-26 19:11:43 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-24 19:11:43 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'notvalid.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 921513860193207617673538216915543167808909966661350300497972114438594224911922939472626065873136434585676649531520635064282130247181127950603420922226711642585482223903176333465308645814518970230545180561048804509644639113563576611555947518272225471543168187999665739557968212935792430411554578480795737908783778949839339673410822668634982127645290577819187947334774391431445463474482768295171594983989005343719727366417751207917311794967281444053831716949275677700601035017826627074875881135532764039650296475256777119356837907823012687154902523593917421295680958685961119274443189102170088736393011113294307697268722672356007276845546398851161936077601248997093066890453037654426391337878081171219774440470505400946945888321388347693376902239157326435343899563660079373221054075717738056238249517315797322901293072398508927747014699742209031110017255309412382275109292993014450049591656637674854681753345400935198160559206314941888882406634226118093518835051182423691347477037817257544481462458972832807439591003051367124651252039891934316561542701756849624314771435330217593572656937245056525794954377844873601390664515509350830981017962639984113073231498489992690994285459169125776913577725499156282142691731273223092653522435153
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e20fba243222af7fc281e1104ca33c6abd726c87
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'notvalid.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016c2fe92331000004030047304502206fc799169f4dca67c8d14f7f44167bda5b276166cfbd03ae0088365b4d8ca774022100a6cebfb8494d8bc6d38dea2973646b8c0395a35256205f14eb41a54c39a0f64b007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016c2fe9231d0000040300483046022100c34ad4f57652c83aef30271d28fce997e6b7d925bc637ce85ea93aefa629e0d8022100a83178b2ee55d4b7e81684af4ab5c84b4ccecac834336fd0c615e4c34b5aefef
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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