finances.page

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:f9:e4:a0:fe:bc:73:fb:35:49:a8:3d:dd:0d:a5:44:e9:bc was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=finances.page

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f9:e4:a0:fe:bc:73:fb:35:49:a8:3d:dd:0d:a5:44:e9:bc
Serial Number (int): 346371067075793572082054928750573777119676
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 1a:b1:41:d3:58:e9:63:f0:f2:b5:c5:1f:fa:cd:88:21:11:0c:bc:7d
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 04:a4:ad:4c:4e:0e:ff:55:9c:1e:b6:9c:c9:e6:93:c1:e6:f1:97:d0
Fingerprint (sha256): c2:c8:d8:5d:f9:c3:04:a0:5f:a1:a8:1f:f7:cb:ae:df:21:20:88:28:09:22:a9:c2:e3:a2:4b:67:dd:99:f1:53

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate finances.page

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for finances.page

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

finances.page
www.finances.page

Other certificates including the domain name finances.page

(limited to 100 certificates)

Certificate

The complete raw certificate details for finances.page in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 346371067075793572082054928750573777119676
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-23 09:33:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-21 09:33:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'finances.page'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 775534357607316549511452948415985274556409455982772427297558558119794085359453470746693945900726187438508880101213144155665415682112313770729436480151081168789043874545180032591555511037147862802362669019998948255970088573808790115803246719515026450292982141788113080880244867639871991940061434319418986335730321713320279686844085526613928027092023693342588941988891659650954504441609326869085756345990895556869668812903638213448703907781266813111611178937150041244234266154848248516164090166038230665492566439706193541315860481407080576835522580087686306392276644118488690150678259482141460235693542402297530996851966826226698091247372148373133535973788555900755692878402714560644582738334882272972756928955271408043429029896463507104644610175382634173641411185451061260874835522102864656356395614425269483736190286508117173119500488820765211467193888142239296455629150319970007163183385159821053900892185470944036646496777251040909008005525393302343605932202471054196597936440659581342836561850680512620423023090916648162269007774638324478302957863836588229004716459810871460286204127768544180442509789287145069532676075960811082464766909192668790220730473328399155798159264734034387801504376709835030399235448752774778183266080207
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1ab141d358e963f0f2b5c51ffacd8821110cbc7d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'finances.page'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.finances.page'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016e97d2928b00000403004730450220145cacf7af2d7845feb00485e5106460097599d03f04916ba60de6346150dcac022100d0895e2d358d6be384665af16104dd029be8d1cf6c0c03de2d7c8236528711960076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016e97d292f10000040300473045022100adc75f58f93a0728bf673924da09344e1a374ce0c4e5d1cb8310b93c50d7bc2202204e1f9a249f8027c1b8800cf0fd40765b689dde50ee97c5f9eacf4ab466b8fb5f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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