www.theprodigalself.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:87:0a:71:ff:6b:8b:76:f7:53:dd:6d:93:62:2d:75:bc:67 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.theprodigalself.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:87:0a:71:ff:6b:8b:76:f7:53:dd:6d:93:62:2d:75:bc:67
Serial Number (int): 394401147451405567306087912347985985780839
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: cf:81:5a:f6:1d:6d:15:46:23:86:71:1f:d5:20:fd:21:52:de:99:b1
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 63:44:4c:12:55:38:1e:1d:8c:0a:c2:44:08:68:c2:85:64:d5:3f:75
Fingerprint (sha256): ce:47:9c:d9:2e:d9:88:4b:80:6a:ac:20:b8:63:15:a6:d8:65:b6:6b:71:c0:c1:70:13:b8:f0:de:dd:42:33:21

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.theprodigalself.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.theprodigalself.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.theprodigalself.com

Other certificates including the domain name theprodigalself.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.theprodigalself.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 394401147451405567306087912347985985780839
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-03 08:28:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-02 08:28:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.theprodigalself.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 678862427689941474606800862021355894789952971878661628939012544499409728818946155575881479201424228374317221070472450023747546691273729115360582318123497640279268470975582736908325200527809820295519399986205290599021817825552258637378137251594101750412554771296857155925125253769433583511743749055128878821196033214792859406732703303023329954676106606629500301053266347467522825847155142355916119802433435896535178058577298832634942702807741469184254489186910454273390637939308463620266392695152899936337557360358449862669999615216713627949745907412332100457212753667742404197412298134125718849783096190672085013139611021031431232193189887693652765456935832726592806031564959443089732195526618690716190760433105172814592186536636846593214949070625987451700544277920012258180701667298236429434849147914472775744581368114162745218470916184805390646967510058535432114224232951009301640973511859603962484488515164787039500608434166597183875391394506905555917102975433331737593393661833177425977454902096544822193207890307438545274622498724823576750617500869716801587225829196971306178642215581398038297093321228104417274135672163907802490010637102159514005650984791041521895642424556675402476562767209300541489972647886959320389975028751
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cf815af61d6d15462386711fd520fd2152de99b1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theprodigalself.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016f6abc1260000004030047304502210090abc84f15b40b2a9b8e8aeba63ab7a202873621c7685548f75fee1ccc14115e022066efcb3ea7cdb05d8f3c298a14b06947340731fada9b0cb1e60629b3956d2acf007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016f6abc142200000403004730450221008a93dcbe838676bf66411a02fca6e2b94a5520656555d06249f266680741bfe40220107afc89124cd4af20bbe689f8cc6f56313383c30bc0b8db826375d98a21969c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0021316e5c2ed936823aa045d417f33dec830ed8b5e31119cc2e951a033313f2de2d7fe43900b918d4a783590cdc7b43502aa3ee425e240eb2733c8957896da47a9004ae9ecd660999fc3634509dc31d9965caeab90a7a536b1fae038e47100f63e399b6ea62ff0478d1eb96d065a5496e1a596fc6f3ca96a3e17214488d7749d14252bc6298eba464e6d8144ad68158b1adf0fa51378e585a0e99cf74e29a6d4317d0797702b03638c7bb7447dd9701d00055495ebd78c451e28e41e068eea5ef9aaa1de99969224879eef9d5dd06d7f20bc065fe4c97af247bd92f4102b949ae753c5d786fd41c06be1d950eb46279f9ebeeade603eec43e09da884180b8a5d1