www.crimpmaster.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 04:9a:f6:85:39:3b:c1:ff:09:1c:93:0c:cf:84:4f:31:86:70 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.crimpmaster.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:9a:f6:85:39:3b:c1:ff:09:1c:93:0c:cf:84:4f:31:86:70Serial Number (int): 401180310056142632319158953311260694906480
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: d8:90:f6:2f:f9:59:09:0e:f5:34:c4:0e:3a:4a:e2:16:82:89:34:b3
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): c1:1b:a7:c8:42:62:36:cc:01:10:b0:57:72:4e:95:b7:4c:24:a3:ce
Fingerprint (sha256): c7:ff:1f:3b:38:5a:9b:4e:f3:b0:3c:9c:21:cf:6b:3f:eb:91:80:ce:61:22:1b:b7:f1:1a:b0:47:d3:19:61:37
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate www.crimpmaster.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.crimpmaster.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.crimpmaster.com
Other certificates including the domain name crimpmaster.com
(limited to 100 certificates)
crimpmaster.com
crimpmaster.com
www.crimpmaster.com
www.christmascaroler.com
www.brasilrecarga.com
inventormag.com
massshred.com
thomasclougher.com
www.chattanoogasportsdoctor.com
crimpmaster.com
www.ashitabaplantforsale.com
jaylon.org
www.crimpmaster.com
www.crimpmaster.com
www.greenvillesportsdoctor.com
crimpmaster.com
www.crimpmaster.com
crimpmaster.com
www.crimpmaster.com
www.christmascaroler.com
www.brasilrecarga.com
inventormag.com
massshred.com
thomasclougher.com
www.chattanoogasportsdoctor.com
crimpmaster.com
www.ashitabaplantforsale.com
jaylon.org
www.crimpmaster.com
www.crimpmaster.com
www.greenvillesportsdoctor.com
crimpmaster.com
www.crimpmaster.com
Certificate
The complete raw certificate details for www.crimpmaster.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGXTCCBUWgAwIBAgISBJr2hTk7wf8JHJMMz4RPMYZwMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEyMTYwMjEzNTlaFw0y MDAzMTUwMjEzNTlaMB4xHDAaBgNVBAMTE3d3dy5jcmltcG1hc3Rlci5jb20wggIi MA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDGypuRXELrldB4FwZ5bMLpFG8p NVVJW3AXSXK5h7X3kmzXBOXX2NVviv/8CWj+PzVuE/UBcWMBZbElW1ZexPSZOQ/6 xf4MfV0a0fNBDhXixVw4yh5h8Wlx0MJAT28aLWpMrSP7PLMdXabALw/uMdldc6io 5vDNokCL5xh5nKXVCLy4dE0pJUtqcJB0NM+1YCnoGDu9EiecpMNLeTNlFpjKxNhb QTWsaO/vQ/3shYUdxyUx5qLFSYYYjmAWpXcVQr56PSwhTLhEpqGRFiOEZiZu2LiD 1mfjJh+til2/tvkwc6kF6kJdTQXxsw+940kHb3XLA9LZUrFHl2B3+5+zt6IHHcW1 duBEdYB/gHthH81jTZdrpaihH5cmn+YJMYGfaXTiIB6rB7zWff6ONB1g2qFdJcI+ NXWHqV997SQL4jxpDp1s/mlmTB4/xRG0h0fYTPVNYnM44CDQeYexI20I+XfGE5zj fp/Zwx06NZjbzHc6SmUplIrRoqamJTc5OHcXVKc1Y9/dCbwDA0a3T04yEMN8sRFN 9bSSBPXJ7Md+xvASImiTPp8Zi+65SxsQaGAG01e4WQnCbSnMSHpSSRiksQu0oLe+ OgI4zxxqfWMfIdwTFcJqhK1BvVXaK1w1fpObx3b2h1GwwxNBAULzBFXPxc1WuJHs qikiSLgB4o4vTK4UDwIDAQABo4ICZzCCAmMwDgYDVR0PAQH/BAQDAgWgMB0GA1Ud JQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQW BBTYkPYv+VkJDvU0xA46SuIWgok0szAfBgNVHSMEGDAWgBSoSmpjBH3duubRObem RWXv86jsoTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3Nw LmludC14My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0 LmludC14My5sZXRzZW5jcnlwdC5vcmcvMB4GA1UdEQQXMBWCE3d3dy5jcmltcG1h c3Rlci5jb20wTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAm BggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEDBgorBgEE AdZ5AgQCBIH0BIHxAO8AdgBep3P531bA57U2SH3QSeAyepGaDIShEhKEGHWWgXFF WAAAAW8MssKZAAAEAwBHMEUCICAB0R0OLf161p6nwBxBPZ1jPoZyo+r2fcUJBhcW 08aOAiEAuQGJgNdat4oHTNcEd2vw3CalRUWchK0mVnioxr7cbf8AdQAHt1wb5X1o //Gwxh0jFce65ld8V5S3au68YToaadOiHAAAAW8MssLIAAAEAwBGMEQCIC0vG9X5 JDoELzW3wGKOestHEv9WRWAk7ijC6yLkz4GxAiAusg/5jmd0jlyKRdy/iI/Skmu0 dkNgA7oaoRQBpW8MpDANBgkqhkiG9w0BAQsFAAOCAQEAYoqIPDCc3PpaBZ/Z89aU OyI5fFnWCgXv73+9RNmLd+ycNQPebVn4equzgLcFxfCKvbDgLNqLM/ZZe+MJfmBC 8ZgPojA7ANW8oQTaZ27cgE9xtMYF418PzYmCBbniCZNDybtMEz4WzJQO6eV3SJOU Sc8TKkTXk+J5I0nzEW4RNDxcoIy0PY48bG0ExTbkCRbWbsDz1+zoGv93T4mvdP6n YSnk6sEfimU3Ql50wv0KLUuqZVnaG3ct/18B0kV8KeYVqDnaPYcmokCl0m8V1/93 Yq1R69MtwUxWW4UqmISNsFhZihI3Ad1peLOKElC34U5LVvgCC9Oz7YU2y5P/U3aY TA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAxsqbkVxC65XQeBcGeWzC 6RRvKTVVSVtwF0lyuYe195Js1wTl19jVb4r//Alo/j81bhP1AXFjAWWxJVtWXsT0 mTkP+sX+DH1dGtHzQQ4V4sVcOMoeYfFpcdDCQE9vGi1qTK0j+zyzHV2mwC8P7jHZ XXOoqObwzaJAi+cYeZyl1Qi8uHRNKSVLanCQdDTPtWAp6Bg7vRInnKTDS3kzZRaY ysTYW0E1rGjv70P97IWFHcclMeaixUmGGI5gFqV3FUK+ej0sIUy4RKahkRYjhGYm bti4g9Zn4yYfrYpdv7b5MHOpBepCXU0F8bMPveNJB291ywPS2VKxR5dgd/ufs7ei Bx3FtXbgRHWAf4B7YR/NY02Xa6WooR+XJp/mCTGBn2l04iAeqwe81n3+jjQdYNqh XSXCPjV1h6lffe0kC+I8aQ6dbP5pZkweP8URtIdH2Ez1TWJzOOAg0HmHsSNtCPl3 xhOc436f2cMdOjWY28x3OkplKZSK0aKmpiU3OTh3F1SnNWPf3Qm8AwNGt09OMhDD fLERTfW0kgT1yezHfsbwEiJokz6fGYvuuUsbEGhgBtNXuFkJwm0pzEh6UkkYpLEL tKC3vjoCOM8can1jHyHcExXCaoStQb1V2itcNX6Tm8d29odRsMMTQQFC8wRVz8XN VriR7KopIki4AeKOL0yuFA8CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 401180310056142632319158953311260694906480 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-16 02:13:59 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-15 02:13:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.crimpmaster.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 810998303778458926427299529552294292945137389587041521635232798105863351314567674664375687139764896876019998619010772351912058743874094599648526649721474749165960569358139574603404463227740292767864252839955910534268514597502395996662735447368228661255067649946346655325272780967371128268739953770870862154005705143257884297131284382193490239724577622142496938654748446253088439532385562691738952491416198714815043265612796379359569649126491019306684391006948076903484575162026958242575233097817927446651861016788841714309485636873048947401579330403723873649881166340315821138213984958711104151932164633380327082846241850789891660300024040981268267391899922697906966087992549250957053308218215802583376684789143369862366454051112861629878608713371681524943113198470488101932381278155200974690463772908353476778381618992406542693063561909737815237841712045018936218407903308832824525982629417675492361770763845714317568510944178323750523714666183426951167433574089476545409270813372807245110609716365265827213598007127174909632843479684427735385490948931348393219927313547220567671499620118857488368345475438929160651247049135953096981894823357884691577667375344660341130637341742450339038146418729700333323277919564762036853774619663 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) d890f62ff959090ef534c40e3a4ae216828934b3 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crimpmaster.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef0076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016f0cb2c299000004030047304502202001d11d0e2dfd7ad69ea7c01c413d9d633e8672a3eaf67dc509061716d3c68e022100b9018980d75ab78a074cd704776bf0dc26a545459c84ad265678a8c6bedc6dff00750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016f0cb2c2c8000004030046304402202d2f1bd5f9243a042f35b7c0628e7acb4712ff56456024ee28c2eb22e4cf81b102202eb20ff98e67748e5c8a45dcbf888fd2926bb476436003ba1aa11401a56f0ca4 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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