agingfix.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:6e:a4:da:46:0d:b8:fc:3e:a1:f5:0b:ba:3d:ad:6a:ca:44 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=agingfix.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:6e:a4:da:46:0d:b8:fc:3e:a1:f5:0b:ba:3d:ad:6a:ca:44Serial Number (int): 298987044889463746271612490920722625645124
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 0c:72:29:87:4b:e0:78:6b:8d:2f:a5:19:4f:82:f7:74:87:e1:60:3c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 18:65:38:ca:ca:75:84:fd:3c:3f:70:0c:a2:08:54:e1:bb:ff:a9:df
Fingerprint (sha256): c4:40:a9:4a:39:83:d1:e5:f7:24:82:de:1d:05:8e:12:b6:18:62:84:78:9b:ae:30:d4:5d:46:4e:0e:05:29:72
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate agingfix.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for agingfix.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
agingfix.com
www.agingfix.com
www.agingfix.com
Other certificates including the domain name agingfix.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for agingfix.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGYjCCBUqgAwIBAgISA26k2kYNuPw+ofULuj2taspEMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAxMjcxMDI5MzFaFw0y MDA0MjYxMDI5MzFaMBcxFTATBgNVBAMTDGFnaW5nZml4LmNvbTCCAiIwDQYJKoZI hvcNAQEBBQADggIPADCCAgoCggIBANkdPd083jVRBUO6lZZo4nSFvk7iBXUzbXrb r9ZgBoxo80Obxv9sIsMDoJaZKmsB9kwtjM2K+J7wP5VjLDQvWBJ7tyJnMIDsvrBX Qf3yXVqyVXjrgVK7vYAzJDU+7Q4nbo+krseuFCjJPtlOAS+soERDNGDBPJbtrPRT jOa5gYMAZv4hXvXdxqTj2kJn1FIWm4KKRJccqwUaZBX4OpZIdK/GGx8BstBNtClD cJii7a/Ik3xTw5bGOhXwmO1BLWfNVpHIFkc5cB8XWV3Ug/SE0B1ZSWPf4Kx5gIKB 1Zja8ZAfaDIhWfsksmjAa5vJLyOEc5piURCrge7QpDuK5X/dVO86c5t/iJs/ej7A NusoqME246HDY/T/f4nsc0Aas3ZVVD6b9B3hKwZ4IXElVAT8OlA0iNatVu3vtWor u5WNBRaD79huuoCY7nWqtbU5oVN8S7btfCrxqlLDQADlYCsJS1skYF8lXGWBtXx+ tL/YPyjsT1qkDxg5stMoJeHsgy/H8GWzuiSH6vB1VkYmQ+HgxDug1tSNpsSVR34L UyKpg9uh5AK2ypejMGRaDba+F+rWOaBqVbDp1nx+C+wx9TkJKmXkiKY2Ot7ZCBH1 nXfHVpVdP6ISltK4MVQkkgr0xzWf80WzZN7qJ0Nr2QU77hLnZPgRChrjhBEJfQ+/ b0GorFhTAgMBAAGjggJzMIICbzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYI KwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFAxyKYdL 4HhrjS+lGU+C93SH4WA8MB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyh MG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgz LmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgz LmxldHNlbmNyeXB0Lm9yZy8wKQYDVR0RBCIwIIIMYWdpbmdmaXguY29tghB3d3cu YWdpbmdmaXguY29tMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEB MCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBAYK KwYBBAHWeQIEAgSB9QSB8gDwAHUAB7dcG+V9aP/xsMYdIxXHuuZXfFeUt2ruvGE6 GmnTohwAAAFv5sOJJwAABAMARjBEAiA25DGDG4MQY1OhKR3nrBdGG/0EmCdiDrtX YOZlmPH/LQIgCqo+Z2EzzRlnnZygqR/GEbHpoYYySIIOYd+i2QHKXPgAdwDwlaRZ 8gDRgkAQLS+TiI6tS/4dR+OZ4dA0prCoqo6ycwAAAW/mw4rsAAAEAwBIMEYCIQDN mo2U7auR7lbYKTaDI2nALGsPrlmohfbj5oewXz7M4AIhAPW3CieZZCYKcOC6hhP9 CGAijbCmOQVV2fD/j91Q0+iYMA0GCSqGSIb3DQEBCwUAA4IBAQBNwAHN4lGNV+7p iaHuKr9I8EipKfkN37ITJWoclA/z/bE5QnnfIvQElBQ/ZxvAgg5THzaQIK9bHdzb vR3okILY7agPuD6U6BWDyGSSUHE5OzdIJD3FBnV3XebHJptQNSXOQlUeufgU10Pu iJIPc7aKggcjBFtx62K0lR8sERqhU6i9lv23i6s/YT38ZcAYjs45nmNUwrEkTTop Bf/WPIaZ9ixVBdaMJPykOMZSPwQCGLsePiv9gTKLN7jYi3Xci9IqLKVrZldABAVH GwMHsMxENtc6N9zQqIJN6t1Bx07dFBeFD7iLHvDIG7e6lt9pxyY5BQPSb2rWA2tI lsPZT7SC -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA2R093TzeNVEFQ7qVlmji dIW+TuIFdTNtetuv1mAGjGjzQ5vG/2wiwwOglpkqawH2TC2MzYr4nvA/lWMsNC9Y Enu3ImcwgOy+sFdB/fJdWrJVeOuBUru9gDMkNT7tDiduj6Sux64UKMk+2U4BL6yg REM0YME8lu2s9FOM5rmBgwBm/iFe9d3GpOPaQmfUUhabgopElxyrBRpkFfg6lkh0 r8YbHwGy0E20KUNwmKLtr8iTfFPDlsY6FfCY7UEtZ81WkcgWRzlwHxdZXdSD9ITQ HVlJY9/grHmAgoHVmNrxkB9oMiFZ+ySyaMBrm8kvI4RzmmJREKuB7tCkO4rlf91U 7zpzm3+Imz96PsA26yiowTbjocNj9P9/iexzQBqzdlVUPpv0HeErBnghcSVUBPw6 UDSI1q1W7e+1aiu7lY0FFoPv2G66gJjudaq1tTmhU3xLtu18KvGqUsNAAOVgKwlL WyRgXyVcZYG1fH60v9g/KOxPWqQPGDmy0ygl4eyDL8fwZbO6JIfq8HVWRiZD4eDE O6DW1I2mxJVHfgtTIqmD26HkArbKl6MwZFoNtr4X6tY5oGpVsOnWfH4L7DH1OQkq ZeSIpjY63tkIEfWdd8dWlV0/ohKW0rgxVCSSCvTHNZ/zRbNk3uonQ2vZBTvuEudk +BEKGuOEEQl9D79vQaisWFMCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 298987044889463746271612490920722625645124 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-27 10:29:31 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-26 10:29:31 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'agingfix.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 885748761013517279533749290192748375585232878847942205304945200649352741555224954890147058152635474435286877502711220346164691984085901363189892732475325180398545950630241620223388660812020032498920984563135846124569400622590947210659455047747332933969539957794578349656133565835719395118850438017423995905836564679714420015315370296627620602679176165198214930761271424882252682372934136958402584585363164721504916732198826400690611473920346520249371621904919807308444485497660483463275033945586285393530736317245961012653797069927934541027913739036155241429535946132759326244109404251396759773483413682015942981396035885391058786206676193638734340057201694548660018324027662915320884838783591448198070600949039533846936656844673889095236904124468251012890578971560385571994299553558235628768653266140020990599536880355591856698786455143828626965046599483785868905834598305126911565875315656128703935199006024654481000025113921991520121055998471814288569295190573373867507245738328240787995375838471162922201013659888795493359179527045763537865294653720819928172990119131836158499676029989415019133916690612891347967726293284218165183882253757648462588096590535216954689262477366722034160004953557669942847583834256026912626934831187 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 0c7229874be0786b8d2fa5194f82f77487e1603c . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agingfix.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.agingfix.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f000750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016fe6c389270000040300463044022036e431831b83106353a1291de7ac17461bfd049827620ebb5760e66598f1ff2d02200aaa3e676133cd19679d9ca0a91fc611b1e9a1863248820e61dfa2d901ca5cf8007700f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016fe6c38aec0000040300483046022100cd9a8d94edab91ee56d82936832369c02c6b0fae59a885f6e3e687b05f3ecce0022100f5b70a279964260a70e0ba8613fd0860228db0a6390555d9f0ff8fdd50d3e898 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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