ygobbs.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:ff:05:31:c9:b9:bd:62:fd:bb:c7:0a:b1:3e:0d:ad:0f:f0 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ygobbs.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ff:05:31:c9:b9:bd:62:fd:bb:c7:0a:b1:3e:0d:ad:0f:f0
Serial Number (int): 348115766014125193647884358330818973470704
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 62:c6:d1:34:37:10:f9:ec:be:63:f9:dd:8b:8a:68:8e:9d:74:85:e9
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 91:48:46:8e:80:56:46:27:f9:5c:ec:a1:a5:51:82:9a:d9:46:46:f2
Fingerprint (sha256): cd:22:90:29:c0:e7:b5:dc:62:23:15:f3:33:cb:a6:07:b7:7c:e6:97:f5:5a:3d:57:7f:e0:58:0b:7a:cb:70:40

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org/

Check the revocation status for certificate ygobbs.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ygobbs.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ygobbs.com

Other certificates including the domain name ygobbs.com

(limited to 100 certificates)
mycard.moe
mycard.moe
mycard.moe
rep.ygobbs.com
event.ygobbs.com
mycard.moe
moecube.com
rep.ygobbs.com
mycard.moe
event.ygobbs.com
ygobbs.com
wj.ygobbs.com
wj.ygobbs.com
rep.ygobbs.com
mycard.moe
mycard.moe
event.ygobbs.com
mycard.moe
mycard.moe
mycard.moe
ygobbs.com
wj.ygobbs.com
ygobbs.com
moecube.com
mycard.moe
rep.ygobbs.com
mycard.moe
rep.ygobbs.com
mycard.moe
ygobbs.com
mycard.moe
mycard.moe
rep.ygobbs.com
mycard.moe
sni.cloudflaressl.com
mycard.moe
mycard.moe
moecube.com
rep.ygobbs.com
mycard.moe
mycard.moe
rep.ygobbs.com
mycard.moe
mycard.moe
moecube.com
rep.ygobbs.com
rep.ygobbs.com
rep.ygobbs.com
rep.ygobbs.com
mycard.moe
rep.ygobbs.com
ygobbs.com
mycard.moe
mycard.moe
mycard.moe
mycard.moe
rep.ygobbs.com
mycard.moe
event.ygobbs.com
ygobbs.com
mycard.moe
mycard.moe
mycard.moe
rep.ygobbs.com
mycard.moe
ygobbs.com
mycard.moe
mycard.moe
rep.ygobbs.com
mycard.moe
rep.ygobbs.com
mycard.moe
mycard.moe
*.hanatan.net
mycard.moe
event.ygobbs.com
rep.ygobbs.com
mycard.moe
mycard.moe
rep.ygobbs.com
rep.ygobbs.com
rep.ygobbs.com
event.ygobbs.com

Certificate

The complete raw certificate details for ygobbs.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAwMS5W887t3F/AwKPPWjF
absKev6QQiENsXMBIiRNThnZYmFGt8m5aCSh8UG96wvrhVPl0L6LL0y9MfB95PYH
b3WVVIRYDW86iWUuSuU9+so/TgG9tAzS0ZeATblg9kz/2BaJ8BPoqoEdLqVmJ4Cw
XNn42/MJ8J226H4gbSklMGUC62vXYyXC65ERgLdT8o3U/BBMe/atMsheFnz+9Hr1
H2fTNdrF9Tfw/A5yaeiMgxU/JdULI96CT17zwRAKYQFXaoepSa/ul31jNCVGnPa0
8iR9uZYmzpMmErdUQJEE5uTdigP/kPPQWyyT/zKWthBSmBKcd3jCfHAW6Wn6G5Im
iWpu8Ppq6q2T2FyA8aIOzh79MQkhvKwg6zpkn80q0DoJXJmZi2txgAxq1Ftfgo/W
A4UKK2i0RZCJ/ZHhfHj5WA4vmPxkyhWzV5MK5SkxqdRPFYi8Gx2lhkf2qJ6dqQVo
6SuvWPz2hEzPeKCMv6zzFAGY2NkLlWED/NbOfWpv2HijoUmh+vvgCBAdxJho8VuA
MkJrAk0DT7g7EUquL+A0dyva6MhMeDYeL2aKDVsrjPkQW/Mf3tLXfvylSRD5Mqwi
VpyYSCFzW7rlM+/BLHBKvjlhif+djRP0AdVrq2vObBmIuDTjiptmb9DgPABi7Sht
b9s5gBLvKgG20Rg6dKSbL2ECAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 348115766014125193647884358330818973470704
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-02-17 09:11:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-05-18 09:11:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ygobbs.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 786426677203600625725563453158888081310386103330721045609395124862433233592176226892198968427685762448156933165612201493746190758496053915180019566130809395814510430678470816759298141203404798912730497463011285126526772459634413503541753833900278822401882999865932789289644807747921370443374454915699917337693776087909111641755247190105429619184760711263075782138853488146908288746446155390234859489849406515251401309925816267699272999304701015040114003154556315444442155167180810560431930419873295972211473517951460734811327575947673026714774428033827701380730989160011103269659246780740252750909250790720530685204866102080537860117405158622110539826560580127829488082321878563084896219673722268552604991587295445252710794416964627308143355962206996635941129784027612113703648647510423271849564791687025338717771700825526818271696319896257080757916091614258250767626375929695132960373900035164215918546638762817553503912379896508300825473223232636052514711499707332334557145061894884727488960963935543856154865948970493467985235855248824021770592095015660153817642073361973834830272774288822922680606295708633954740296801658651985139663498323730467104549876504001121550577350117399596355708193617793518063046020272872775175489924961
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							62c6d1343710f9ecbe63f9dd8b8a688e9d7485e9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (14 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ygobbs.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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