www.crashit.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:49:0b:8d:ca:a2:1c:88:d2:cd:36:b4:70:71:73:cc:6b:9b was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.crashit.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:49:0b:8d:ca:a2:1c:88:d2:cd:36:b4:70:71:73:cc:6b:9bSerial Number (int): 286192828312210468512612808943695888673691
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 24:0f:c3:f4:b3:77:4f:1c:83:7b:6f:e8:65:2d:8f:05:fe:39:aa:10
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 68:b2:59:25:54:47:fb:5d:c2:b7:23:6a:ec:71:22:a8:03:01:bb:48
Fingerprint (sha256): c0:d7:5e:6d:ee:3d:84:e9:8f:a8:b1:7f:e7:6b:73:9b:e5:ca:81:5c:50:76:0f:ae:6f:52:a3:7c:9b:cd:30:06
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate www.crashit.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.crashit.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.crashit.com
Other certificates including the domain name crashit.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for www.crashit.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGVjCCBT6gAwIBAgISA0kLjcqiHIjSzTa0cHFzzGubMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA4MzExNzA2MjBaFw0x OTExMjkxNzA2MjBaMBoxGDAWBgNVBAMTD3d3dy5jcmFzaGl0LmNvbTCCAiIwDQYJ KoZIhvcNAQEBBQADggIPADCCAgoCggIBALsOU0cWjos6oQbsKzC0Icyh3kWzwRka 6iQzIbaEHqfwQgzsC6n2QMcU84DRnMycrnnCeVZsqQnQ7gXOla6+iXYItmu+SGRB gQp+cIldnn83Lwx7gkbUUH3O5LJOPN1ARiUuweBrRcnJ9aqvcUgf74EokuwFNXg3 Dz41AOi61liGOKIaCm6+9sm07fXg8E7rkNuVnG4Ik+Uo4Mo9/JtND+zwx4b3JCfw 6fKOC2i9s0sBTMIyw6Z1lCmdxjNjSq7vtn8CIRz9GkrYMTSPz7uwEyuem04Q0lJH 4WxUYAIO/oKVCnHZuGCTs62nnIOhmJQ1tAC+Yr8gktHpIDyWUQXo8MJOZk1V2nBs ADWIEUY40iMJqOnPZZAyw0T+nhijoAdVVMEJsAiJ+CHLCuvJBey6usNl9t3Nnor7 IwZT3gcaPf0Oe3HWmYeCQyvJ3eRtpX/cKfcmqoXl06uE+595jvqLBBts2YSlnRNx Mn8+7QEooPmhdUWkiESbHrHv6CBRA9JUW8DFvTLydjM67DjCEw1b36MEbQfHvH71 2ssXRc8KRk9Zq6/bPhE3/bOcmbzrhq2oweQLLGfVbh3T6wLypFpw1elc1Wb6pO6w vPCBsxdIWrLGZvwrGKcSRtUQcH4qJZ8mx8FyMQNnN7yFy8HYn84t4L5m82jZseFj mMpgvDHKbzKbAgMBAAGjggJkMIICYDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYw FAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFCQP w/Szd08cg3tv6GUtjwX+OaoQMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/z qOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50 LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50 LXgzLmxldHNlbmNyeXB0Lm9yZy8wGgYDVR0RBBMwEYIPd3d3LmNyYXNoaXQuY29t MEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUH AgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBAYKKwYBBAHWeQIEAgSB 9QSB8gDwAHYA4mlLribo6UAJ6IYbtjuD1D7n/nSI+6SPKJMBnd3x2/4AAAFs6NtJ LgAABAMARzBFAiEAzUq/8RuV/ycKdg7DFSnQHLeNi46CRGbxDH6IzpfLVssCIGw9 XxBUVEd1aRsctm7aUQ76t1M43n87j6EyNOs0Cv/lAHYAKTxRllTIOWW6qlD8WAfU t2+/WHopctykwwz05UVH9HgAAAFs6NtJOAAABAMARzBFAiEA/y2+PVonq5/HpHW3 fH+c44WKDM3ao5+zr1KDkP89A/ICIBHEIC7Fvf8vDtPqXHvyTLDeS8FsE2NkRkIa NtdbTh7GMA0GCSqGSIb3DQEBCwUAA4IBAQCIlNNk0bhIQDOvAqpHqGvFZjFO5cDZ +NMq1LbsD/uoKo7vl5+z7S1/IT5e3YrDd1L5HhRESG4ZlJpgDFq2Oh8B6o3ShssT iXhLAt8XStet7Tq/Q9ScN6e2LL3qi+Qd370ee6K5WeXe2LINCvol0x3fTCNnqHWi xynOUTfbQQugA1IJkfM94OaY50BtEgwZklk4Ec1z282chJIw+ekbAEbIkF7JgZCG QWhQ4FgN0JLe72c707a/nA+6+aO1Yh8sgwLTaSyMfDG5oobZyJmkS9YyOe/qayqY LWIjd1RNV/RfEWwvHlNXTg1TMUtyDra9n51f/qKOxAGcXWwMLACetrCp -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAuw5TRxaOizqhBuwrMLQh zKHeRbPBGRrqJDMhtoQep/BCDOwLqfZAxxTzgNGczJyuecJ5VmypCdDuBc6Vrr6J dgi2a75IZEGBCn5wiV2efzcvDHuCRtRQfc7ksk483UBGJS7B4GtFycn1qq9xSB/v gSiS7AU1eDcPPjUA6LrWWIY4ohoKbr72ybTt9eDwTuuQ25WcbgiT5Sjgyj38m00P 7PDHhvckJ/Dp8o4LaL2zSwFMwjLDpnWUKZ3GM2NKru+2fwIhHP0aStgxNI/Pu7AT K56bThDSUkfhbFRgAg7+gpUKcdm4YJOzraecg6GYlDW0AL5ivyCS0ekgPJZRBejw wk5mTVXacGwANYgRRjjSIwmo6c9lkDLDRP6eGKOgB1VUwQmwCIn4IcsK68kF7Lq6 w2X23c2eivsjBlPeBxo9/Q57cdaZh4JDK8nd5G2lf9wp9yaqheXTq4T7n3mO+osE G2zZhKWdE3Eyfz7tASig+aF1RaSIRJsese/oIFED0lRbwMW9MvJ2MzrsOMITDVvf owRtB8e8fvXayxdFzwpGT1mrr9s+ETf9s5yZvOuGrajB5AssZ9VuHdPrAvKkWnDV 6VzVZvqk7rC88IGzF0hassZm/CsYpxJG1RBwfiolnybHwXIxA2c3vIXLwdifzi3g vmbzaNmx4WOYymC8McpvMpsCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 286192828312210468512612808943695888673691 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-31 17:06:20 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-29 17:06:20 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.crashit.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 763121730326474339318203327741521111293835727042544519059561046900850809792531989980701460358048899762881414968072427222371170865152001249691095217308403317732544590070133467104220547195263103923850799345299817545640377053587674344195569650722662419300494419847253547818405458969803614537881783319323243176910896092074644637486736380878691755902866766653141430871553997128110596386965387744259587063355972561723959435125216403638649368302730098107945047818815307733979261744283815815274239757887948988258662086098498539096584266860200422796124607506932808382702873508002067325422381988303278408404075922275731324465982461362692012929846490003291330579114088323229282650662371183409423712284536285422153790649467302642608752764557447122118897805353771513069296326459581848643003006048047367831018029035123248816602681346897099941200796974611499161241008086440468315682202504196343485462252387642687561372137750206724819296814273838843268677883649727561109402617900302133493061202776029581769640350545374926437395863546679044734228197441447705726293782585368548505487652263246780143012855344897597034807690150832220667416841552535625224557926355904115096391592019760126712011718310571378149180180580986202674305162545948297380267766427 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 240fc3f4b3774f1c837b6fe8652d8f05fe39aa10 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crashit.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016ce8db492e0000040300473045022100cd4abff11b95ff270a760ec31529d01cb78d8b8e824466f10c7e88ce97cb56cb02206c3d5f1054544775691b1cb66eda510efab75338de7f3b8fa13234eb340affe5007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016ce8db49380000040300473045022100ff2dbe3d5a27ab9fc7a475b77c7f9ce3858a0ccddaa39fb3af528390ff3d03f2022011c4202ec5bdff2f0ed3ea5c7bf24cb0de4bc16c13636446421a36d75b4e1ec6 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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