40649.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:39:c8:f9:38:ae:22:dc:4a:16:c9:35:e0:5a:96:f7:a1:7e was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=40649.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:39:c8:f9:38:ae:22:dc:4a:16:c9:35:e0:5a:96:f7:a1:7eSerial Number (int): 281000092340460417589809542913159046078846
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 2e:e6:06:d4:88:ac:85:7f:ac:d1:98:7d:1c:49:d3:5f:af:70:70:a1
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): f4:8a:3f:e1:cf:ab:2c:9d:70:35:9e:ae:7e:60:1c:ed:d2:b7:61:05
Fingerprint (sha256): c9:02:9c:54:24:d4:3e:b4:4d:1b:31:09:2e:d5:2b:76:35:11:00:ec:0c:6a:ef:6c:1b:dd:72:e8:4a:a1:ee:9e
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate 40649.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for 40649.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
40649.com
Other certificates including the domain name 40649.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for 40649.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgISAznI+TiuItxKFsk14FqW96F+MA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA1MjUxMTI3MTZaFw0x OTA4MjMxMTI3MTZaMBQxEjAQBgNVBAMTCTQwNjQ5LmNvbTCCAiIwDQYJKoZIhvcN AQEBBQADggIPADCCAgoCggIBAJnARR5y5fYvRx9VBm09yIw8QY4anJEbKuXipQje 0proY7TrTKhEzDgrvMig4eGIgu6AjwWQS4NibNxpd6IVWTCt1noJpTIquiQj0txr g2vnfXoRzoZEJ6Ur62zLjyKEloagPxeM5VXBY+HiNFWX7DL2s1WjV2g4D/8B3OaY kVYdp7P3zuGWWVNisbJ2cdAyiiz5ZDHLFGLmLDed21LAGse7jZKAwlvlgZNzAWuI K7Qm9+cy/f7WsIDPak5Zg8RLOuANSoLkzNEwAfcyIroZTyScBbDbheswGqHyVp6Q UR99/NV9yqdWRWOMYEEkACZqjmnob/T9nd/KDaONftt2CIpXonXOmm0F9IIaU79O Lwk7ou0v4LVl661BD4fR+0WLtz97mpFpAhSlaZjcl/fxME2iHVmgRVN70/8j0BX9 lfXD/1S+6nEqEgow4h1z9eVkIyXJhRq1s3K3TlinRrh/pAgR2KHNNpofhUXRDHYU QE64p+pMp7k2wmaEbMyolfT6JgbPoV6uKQY5ADIlWlxWsnpj1amEnW0A1jJskp/j u++Y2W3/SQaa7gm6LT8pU82LQA37qtEGf2O9YViAb7emy/JzOhsUQZ1is15SUPKK XL161gX7RcP5pLImLrsNsruMl0jBjTXfMpCr8axSAKStlSZIenoz8lL9MCzRQVyR IU1nAgMBAAGjggJdMIICWTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYB BQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFC7mBtSIrIV/ rNGYfRxJ01+vcHChMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8G CCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxl dHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxl dHNlbmNyeXB0Lm9yZy8wFAYDVR0RBA0wC4IJNDA2NDkuY29tMEwGA1UdIARFMEMw CAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9j cHMubGV0c2VuY3J5cHQub3JnMIIBAwYKKwYBBAHWeQIEAgSB9ASB8QDvAHYAY/Lb zeg7zCzPC3KEJ1drM6SNYXePvXWmOLHHaFRL2I0AAAFq7vWjawAABAMARzBFAiBn MAV4t16QfCx6wBr6nJers2Z0dY7K9DKmgFhGRKPb+wIhAMDGU1DoXWzO6E8lmM0y V9UiygflV5tj/IKAACX/rIerAHUA4mlLribo6UAJ6IYbtjuD1D7n/nSI+6SPKJMB nd3x2/4AAAFq7vWlbQAABAMARjBEAiAoocGtCEsEg6J+gPMywPvwb+Os8WeHm7oE Mp52Qf7tyAIgTHxeJr3/n3ZC1Xv61RT1eRbahynvf81yVKJBx9C9aIIwDQYJKoZI hvcNAQELBQADggEBABXAr8+JmTat8xVGLiBlWjgLMTcWxqq057nJVK+TyF8y/0mp AqssmzkRFpP8ZY+gCgEZw3scu7JtvOO2W50CrUZnLSaxA4QTTadnL1lpE3cdREtU rjS4sj2jlO0skvGfuSRJsRU4kchuWlPXbxvce+RCHyiJQU4h4gt34d62afcExYwa OGGpB2HEMqoJPWiRJiV0XPVtARWUvOQByLs//xSz/036FdtgCo/ak7PfUIFap/ug 5J8gw4KQw83KTJwHnFLqQEdGxEfosKGs7SeG7VHgCNjnVKrPd4lJah7NWg3CiHEx EQRYX7KFOoRio1IR50WxalvrxqO7bAHA9Agb2/Y= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAmcBFHnLl9i9HH1UGbT3I jDxBjhqckRsq5eKlCN7SmuhjtOtMqETMOCu8yKDh4YiC7oCPBZBLg2Js3Gl3ohVZ MK3WegmlMiq6JCPS3GuDa+d9ehHOhkQnpSvrbMuPIoSWhqA/F4zlVcFj4eI0VZfs MvazVaNXaDgP/wHc5piRVh2ns/fO4ZZZU2KxsnZx0DKKLPlkMcsUYuYsN53bUsAa x7uNkoDCW+WBk3MBa4grtCb35zL9/tawgM9qTlmDxEs64A1KguTM0TAB9zIiuhlP JJwFsNuF6zAaofJWnpBRH3381X3Kp1ZFY4xgQSQAJmqOaehv9P2d38oNo41+23YI ileidc6abQX0ghpTv04vCTui7S/gtWXrrUEPh9H7RYu3P3uakWkCFKVpmNyX9/Ew TaIdWaBFU3vT/yPQFf2V9cP/VL7qcSoSCjDiHXP15WQjJcmFGrWzcrdOWKdGuH+k CBHYoc02mh+FRdEMdhRATrin6kynuTbCZoRszKiV9PomBs+hXq4pBjkAMiVaXFay emPVqYSdbQDWMmySn+O775jZbf9JBpruCbotPylTzYtADfuq0QZ/Y71hWIBvt6bL 8nM6GxRBnWKzXlJQ8opcvXrWBftFw/mksiYuuw2yu4yXSMGNNd8ykKvxrFIApK2V Jkh6ejPyUv0wLNFBXJEhTWcCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 281000092340460417589809542913159046078846 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-25 11:27:16 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-23 11:27:16 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '40649.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 627249578141756178185327203625313006716081637898092931432011682977167668628183014102993239966171383595536137987341082946343618823010114461672391091482821644221837735013046160757702076041767553648681934945395902738743123560450915192518517153975715707196073781988125651254088991831753070100007548743038128346496354187152401068397835655827090906158453379295930573509106599065667875664598493821718869794548589894737094410308443168106854126595137756316343244514129069229454893812464796904532418946876247939273458266817251471379574280626515862360910179110352202947874044234053767332212180474298085001941909047412910038074177136000494270728905143892414664367239158110867675336277687682236903900769218422174030016028647535234620241824345009635323901180676838378148387694730577656895716069464380674974193802064810124536817811443961840792811446747435456391610897321657655050306341889240567275885694204010303861758399503719635823973907733397961023617312532711397815791446806501484748176467885796510351340598573148185776654642836508192913141276073841721496966676231106363323186167968856676011275030115477890629459880431155586365549218797030880216834029069767701982839282349464309392737263038253419062546949382557940260756314323045164764656389479 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 2ee606d488ac857facd1987d1c49d35faf7070a1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (13 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '40649.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef00760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016aeef5a36b0000040300473045022067300578b75e907c2c7ac01afa9c97abb36674758ecaf432a680584644a3dbfb022100c0c65350e85d6ccee84f2598cd3257d522ca07e5579b63fc82800025ffac87ab007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016aeef5a56d0000040300463044022028a1c1ad084b0483a27e80f332c0fbf06fe3acf167879bba04329e7641feedc802204c7c5e26bdff9f7642d57bfad514f57916da8729ef7fcd7254a241c7d0bd6882 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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