dailycraftdeal.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:4e:93:b9:31:21:68:9d:4e:bf:81:28:54:6f:d0:be:6b:9c was issued on by Let's Encrypt.

With 24 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=dailycraftdeal.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:4e:93:b9:31:21:68:9d:4e:bf:81:28:54:6f:d0:be:6b:9c
Serial Number (int): 288075240501898128222597949528268125137820
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 18:75:de:4c:ef:cf:64:55:97:ca:38:c6:fe:af:3b:f0:20:29:fc:c2
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 23:1a:b5:aa:89:bc:35:d6:42:f0:a6:79:92:d1:d6:74:34:18:90:66
Fingerprint (sha256): c9:e1:f9:df:fb:75:62:aa:46:d6:c0:40:d0:12:18:67:72:1d:a5:10:a7:d5:99:d2:aa:f2:da:ed:78:80:5c:91

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate dailycraftdeal.com

24

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dailycraftdeal.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dailycraftdeal.com
dailycraftdeal.helpfulhintsforliving.com
gadgetzan-us.helpfulhintsforliving.com
horvath-ca.helpfulhintsforliving.com
horvath.ca
mail.dailycraftdeal.com
mail.horvath.ca
mail.offthebeatenpiano.com
mail.progressivite.com
offthebeatenpiano.com
offthebeatenpiano.helpfulhintsforliving.com
photographiasf.helpfulhintsforliving.com
progressivite.com
progressivite.helpfulhintsforliving.com
www.dailycraftdeal.com
www.dailycraftdeal.helpfulhintsforliving.com
www.gadgetzan-us.helpfulhintsforliving.com
www.horvath-ca.helpfulhintsforliving.com
www.horvath.ca
www.offthebeatenpiano.com
www.offthebeatenpiano.helpfulhintsforliving.com
www.photographiasf.helpfulhintsforliving.com
www.progressivite.com
www.progressivite.helpfulhintsforliving.com

Other certificates including the domain name dailycraftdeal.com

(limited to 100 certificates)
paleobunker.com
androscom.helpfulhintsforliving.com
hellofuturelabs.com
groovystash.com
helpfulhintsforliving.com
progressivite.com
thinkfuture.com
tidysac.com
tidysac.com
failkick.com
dailycraftdeal.com

Certificate

The complete raw certificate details for dailycraftdeal.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtoCKCJWRXt5C7VJNquT1
Ybm5GunSaHPSGxGl+BefrEnqnhF/UXNAzKPMHrqUi2zLJ3X+L2MN/+94hIlJC3TA
lcbzJhKlGA8EYVQb7+VZrRTDu4is9Exojcm+0h01YXdofLIBGS1NEY9iAlkfILa0
4jOhBHJSuikaOeycz/GYRo0/j/bpT1qUz9aqpwX0OryY57VqFrNCOIfCdFeqASr8
FE5sQwBvYnjBaMq9GazrGigy+ehjREsGQ0gKuFZfEzlervieCJjKTsoG9m2e43M/
i2dDCLyPzBoywFYI7h8ns/4Wm/fueUI7xHuXlRrvCqqtQl8YXPLGMVD8Txn/h7P4
XQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 288075240501898128222597949528268125137820
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-06 11:33:35 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-04 11:33:35 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dailycraftdeal.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23038756542522991006416272155791492253476178137871735647529185314373255415013214936340939055866100361698738294849684494187808806602297089352089877938634573730234377563471631863205189954665816670933398430472338365780646827030762217507542813539287806541338121167515700346309991337914176721523126520713133806310719009002305443816587732824581686469243403894199261692748057040286048041165870740728962340509778738319319677240669550324822832740525633574790492698655444611027782931020876673948674066898082611552901300767877113784736097289839973993500705519036931192451902098600777088478349036790055417241642523717096057337949
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1875de4cefcf645597ca38c6feaf3bf02029fcc2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (782 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dailycraftdeal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dailycraftdeal.helpfulhintsforliving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gadgetzan-us.helpfulhintsforliving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'horvath-ca.helpfulhintsforliving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'horvath.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.dailycraftdeal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.horvath.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.offthebeatenpiano.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.progressivite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offthebeatenpiano.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offthebeatenpiano.helpfulhintsforliving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'photographiasf.helpfulhintsforliving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'progressivite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'progressivite.helpfulhintsforliving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dailycraftdeal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dailycraftdeal.helpfulhintsforliving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gadgetzan-us.helpfulhintsforliving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.horvath-ca.helpfulhintsforliving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.horvath.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.offthebeatenpiano.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.offthebeatenpiano.helpfulhintsforliving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.photographiasf.helpfulhintsforliving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.progressivite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.progressivite.helpfulhintsforliving.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000166e9038c950000040300483046022100f838f6da135989561677183d6afcc16a3ac495a0377b42ba33f13b68dc9e576c022100bedba7d0874a4b9fc9246c4e035616969ef91f0f153ea2ff267a276e3ca7ba1e0076005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c00000166e9038d9b000004030047304502203bd2d46301ae8a47bf8dbafb1f864243ab7d329753910a2b3a75af6f1ddaa16c022100fbb5b863182641e90e1896158db524919ace1d013610dd72f379a6f66439d48a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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