www.snailsites.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:40:15:13:82:22:44:84:d5:e2:c7:28:3f:42:b4:03:ee:c6 was issued on by Let's Encrypt.

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.snailsites.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:40:15:13:82:22:44:84:d5:e2:c7:28:3f:42:b4:03:ee:c6
Serial Number (int): 283142944359200808565709154399635927985862
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 32:4e:8e:54:4c:1d:b3:80:07:b1:ec:43:22:aa:fb:ee:4e:37:4e:71
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): f5:dd:37:41:98:fb:c6:27:8b:53:c5:a0:b0:30:3b:2a:81:ba:68:c4
Fingerprint (sha256): c6:52:75:b2:0f:99:10:2c:bd:ee:d3:b8:ef:ea:12:b6:62:16:99:80:d0:61:e2:c3:a8:d2:7b:5d:f2:24:14:38

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.snailsites.com

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.snailsites.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

snail-sites.com
snail-sites.de
snailsites.com
snailsites.de
www.snail-sites.com
www.snail-sites.de
www.snailsites.com
www.snailsites.de

Other certificates including the domain name snailsites.com

(limited to 100 certificates)
version.snailsites.com
vp.primaholding.snailsites.com
wgg-hgw.de
version.snailsites.com
anywhere.snailsites.com
vp.primaholding.snailsites.com
vp.primaholding.snailsites.com
vp.primaholding.snailsites.com
wgg-hgw.de
version.snailsites.com
www.snailsites.com
wgg-hgw.de
wgg-hgw.de
anywhere.snailsites.com
wgg-hgw.de
version.snailsites.com
portal.vp.primaholding.snailsites.com
vp.primaholding.snailsites.com
vp.primaholding.snailsites.com
vp.primaholding.snailsites.com
portal.vp.primaholding.snailsites.com
wgg-hgw.de
wgg-hgw.de
version.snailsites.com
portal.vp.primaholding.snailsites.com
version.snailsites.com
wgg-hgw.de
www.snailsites.com
vp.primaholding.snailsites.com
vp.primaholding.snailsites.com
www.snailsites.com
version.snailsites.com
www.snailsites.com
vp.primaholding.snailsites.com
vp.primaholding.snailsites.com
version.snailsites.com
wgg-hgw.de
version.snailsites.com
vp.primaholding.snailsites.com
wgg-hgw.de
wgg-hgw.de
vp.primaholding.snailsites.com
anywhere.snailsites.com
wgg-hgw.de
anywhere.snailsites.com

Certificate

The complete raw certificate details for www.snailsites.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 283142944359200808565709154399635927985862
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-01 12:52:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-30 12:52:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.snailsites.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 656311064121267806971966352899557085961676962272001036112138422016444701012873843044315192322481705317287839404373718625114639847935899474904165878401165304313897520190936983556611804714266726583792267930652160138357595973593795379089460781130729029921235821170214794263671674217996973040452186411331733104259195312249825157129258139464128071560301274095718566997429977446175960277819998599077207267762077252666685151619027161760160004455138123786068123089665214171407337390392104244220922844881296798140178797452827778076275251363383942564114497615650619676151655408568471813886972293619473061335843515800882294955186453659441447389632794794657151351495444653901225692379252189204035948404239226396285485364937103857404452481182431171834752497937911616917442512886832396907872859867994116167947829578281899653512055187706408731560216617805861164017508447134987715110166958802927226824427968148286582391309189547558785251105116986992318864545952876439587951954674568320030954650587758288931814532127286058730650929152439634634099805997257983701516946085427940614522141822223553422039714748254598770467032014469200547405450614171885364026029121481880187071649294038295344941277360493926855156636854826607073950867172031549825510544957
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							324e8e544c1db38007b1ec4322aafbee4e374e71
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (147 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snail-sites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snail-sites.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snailsites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snailsites.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.snail-sites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.snail-sites.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.snailsites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.snailsites.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016e273cda13000004030047304502203e3eb71385b1ff82aa8bc64934b50771efcfd9c4f881e74468ef4a1c93db0646022100fadb4b119bf78702f1688cdfaf45a7821b613c7fa7fd693fc5374d50fa1d7e7a00750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016e273cda430000040300463044022072fb641d32979f7a823867d377401232898ddc5c0ce2e9d7cb474e58dbc9eccc02202443d3fc151b56323d7edde16c0ffd35e7b4fe2cb2d459687b159c5a3697ec58
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00319408febdd28578cbba316c772b26857b13b7895fc29053001e961b6e4945b8363e2ed5bd85cc8c39254b44399174d6708677d4addf386b85afa565b614e919d66807b8873558f72ed66668dfa4bd31eb185bfc4896c05cb91af129f74b10ac6f6f57babc9e1ee2eedd00bff704154857584f2500b7a57e553e357f9fcf70a72e5db645b6300889effcd48eaa5dba72f491ee3c86cc7377f0b94920cc8554436fc8928d70b51fcb0a5baa617933f162c72528fc81e32708bb7876f67adef43f78cc01f00046f74119df87eaca629a714ac70c91b8ecdae1c38ff834a746c530905824da390e05b69c4f7ec14dc15ec2384a8a16261e659c61a97927711dfa56