downloadcrewstore.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:dc:18:fa:dc:8e:9b:76:89:d8:64:f5:4c:26:f6:75:50:9b was issued on by Let's Encrypt.

With 21 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=downloadcrewstore.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:dc:18:fa:dc:8e:9b:76:89:d8:64:f5:4c:26:f6:75:50:9b
Serial Number (int): 336232182537429298950788968032255478157467
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 6b:93:1a:02:86:d3:62:c5:b7:a3:ab:07:eb:ee:be:cd:fb:83:c2:bd
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): b3:b8:30:25:16:48:bf:d7:9d:c9:39:8e:af:16:ba:97:45:ac:b2:10
Fingerprint (sha256): cd:33:cb:b5:7d:02:8b:67:52:24:77:3c:d3:3b:72:29:5f:0e:5d:b8:99:13:94:7f:53:47:b7:2d:02:99:2f:1f

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate downloadcrewstore.com

21

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for downloadcrewstore.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

downloadcrew.co.uk
downloadcrew.com
downloadcrewstore.co.uk
downloadcrewstore.com
giveaway.downloadcrew.com
kaspersky.softwaredeals.de
mjukvara.datormagazin.se
software.pcwelt.de
software.pcworld.com
software.pcworld.es
softwaredeals.de
store.computeractive.co.uk
store.fileforum.com
store.pcpro.co.uk
store.techadvisor.co.uk
www.downloadcrew.co.uk
www.downloadcrew.com
www.downloadcrewstore.co.uk
www.downloadcrewstore.com
www.kaspersky.softwaredeals.de
www.softwaredeals.de

Other certificates including the domain name downloadcrewstore.com

(limited to 100 certificates)
downloadcrew.com
downloadcrewstore.com
downloadcrew.com
downloadcrew.com
downloadcrew.com
downloadcrewstore.com
downloadcrewstore.com
downloadcrew.com
downloadcrewstore.com
downloadcrewstore.com
downloadcrewstore.com
downloadcrewstore.com
downloadcrew.com
downloadcrewstore.com
downloadcrewstore.com
downloadcrewstore.com
downloadcrew.com
downloadcrewstore.com
downloadcrew.com
downloadcrew.com
downloadcrew.com
downloadcrew.com
downloadcrew.com
downloadcrewstore.com
downloadcrew.com
downloadcrewstore.com
downloadcrew.com
downloadcrewstore.com
downloadcrew.com
downloadcrew.com
downloadcrew.com
downloadcrew.com
downloadcrew.com
downloadcrew.com
downloadcrewstore.com
downloadcrew.com

Certificate

The complete raw certificate details for downloadcrewstore.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9pWGwkhWb2Td66SUCcDy
H1K48I9ggRJ1OfLAMLJRD06ebkxp7+BRhmNt5CdFqDtno1gmtgHrhrLLCD6I1zap
yeZqmLW+f8MzL8XmpAJTWQQyurBqUYZ++0sjDowovefKD3xrKVD/pEcTW4z2ZBPc
ljEEMZDfX7NVNe7RhaZl92kOE4sS+gW5+zFJqHm1WVazQOlIWt9QiP6+aXHNPhKS
2TaMfPmoUu0JtV1SXAT1PIitG1ujXJgnXpVsFYNMa1HCwaM/lg2u1k+w7+j+g/HH
eiuz8IaGjVIp/OS6uEjgr3RV4mznxaglyl9lUhELnx6hNVTfzTWqvoNhlcj+2lpG
8QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 336232182537429298950788968032255478157467
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-10-25 14:06:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-01-23 14:06:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'downloadcrewstore.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 31128357238596774069600442983979901454938069964618565659008334445870184915108509553692074927328860851764062711209689895399743907212452194023626569316467570258198960546317969445173049430431323148033322374160349925798531240767067053737197989864723599325825474101861045152240514942324630156049825038481768801001981391926501640476105095898064423848729603697761859135803440150606771533209612360760911471697765232265616472688715255804699367095851865216137406233203586201736197603033085876056029858587957505235556914941153871631540365571669577590401590012891899048932732003957559986486132931410612422763219904182792700446449
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6b931a0286d362c5b7a3ab07ebeebecdfb83c2bd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (501 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'downloadcrew.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'downloadcrew.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'downloadcrewstore.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'downloadcrewstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giveaway.downloadcrew.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kaspersky.softwaredeals.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mjukvara.datormagazin.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'software.pcwelt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'software.pcworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'software.pcworld.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'softwaredeals.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.computeractive.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.fileforum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.pcpro.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.techadvisor.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.downloadcrew.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.downloadcrew.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.downloadcrewstore.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.downloadcrewstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kaspersky.softwaredeals.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.softwaredeals.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075004494652eb0eeceafc44007d8a8fe28c0dae682bed8cb31b53fd33396b5b681a800000175604b9972000004030046304402202db26361a76087d4859936f9e5adf788c450dfdf88d62664f5a2bc3ec23cdb8c02202b6bef827d5edf946951851527c94e1d668eea8d53470d913564c78eae56cdc5007600f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e300000175604b996600000403004730450220515a377ee401ebd18cd5ad85471ba34e0ecacac6851e39c9c30a34cc4e453002022100a97b05f8925aeb88598e8c9f07e3752e180df97e2c962f27dd00ad85dbc72161
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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