www.tropiconctf.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 04:42:04:4b:88:a7:d5:09:6a:c9:98:ec:54:13:93:64:48:56 was issued on by Let's Encrypt.
With 14 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.tropiconctf.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:42:04:4b:88:a7:d5:09:6a:c9:98:ec:54:13:93:64:48:56Serial Number (int): 370913489049775195878865384200171463919702
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 8a:dc:76:28:3e:b0:a6:36:1c:2d:2b:34:a8:2d:bd:5a:d0:ac:7b:ae
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 20:85:83:dd:6f:6c:0b:03:29:01:02:2c:26:fd:65:62:b5:49:43:55
Fingerprint (sha256): d0:3c:f4:a9:d6:35:8b:d9:2a:6f:76:18:e5:eb:db:1d:c4:6c:8c:a6:ef:d7:0d:c1:6c:c3:71:a6:f5:92:74:b5
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate www.tropiconctf.com
14
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.tropiconctf.com
Public Key Algorithm
ECDSA
Key Size
256
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
backstage.globalcompasshub.com
conference.policerecordsmanagement.com
eventos.qdigital.mx
events.aboutgolf.com
events.asistentesconectandoenoaxaca.com
events.culytics.com
events.echodevelopment.org
events.intechnology.com.au
events.kobylerner.com
grupos.vokarine.com
www.berlinwelcomeday.com
www.gabconevents.com
www.nvcharterconference.info
www.tropiconctf.com
conference.policerecordsmanagement.com
eventos.qdigital.mx
events.aboutgolf.com
events.asistentesconectandoenoaxaca.com
events.culytics.com
events.echodevelopment.org
events.intechnology.com.au
events.kobylerner.com
grupos.vokarine.com
www.berlinwelcomeday.com
www.gabconevents.com
www.nvcharterconference.info
www.tropiconctf.com
Other certificates including the domain name tropiconctf.com
(limited to 100 certificates)
www.tropiconctf.com
www.tropiconctf.com
events.nicosantoniou.com
www.tropiconctf.com
www.tropiconctf.com
www.tropiconctf.com
events.intechnology.com.au
events.lemeilleurde.ch
events.culytics.com
www.tropiconctf.com
events.biodot.com
events.reikieducation.org
eventos.aqbank.com.br
events.lemeilleurde.ch
events.lemeilleurde.ch
www.tropiconctf.com
www.tropiconctf.com
www.tropiconctf.com
events.staenz.com
comparatif.nouveauxcourtiers.com
www.tropiconctf.com
events.nicosantoniou.com
www.tropiconctf.com
www.tropiconctf.com
www.tropiconctf.com
events.intechnology.com.au
events.lemeilleurde.ch
events.culytics.com
www.tropiconctf.com
events.biodot.com
events.reikieducation.org
eventos.aqbank.com.br
events.lemeilleurde.ch
events.lemeilleurde.ch
www.tropiconctf.com
www.tropiconctf.com
www.tropiconctf.com
events.staenz.com
comparatif.nouveauxcourtiers.com
Certificate
The complete raw certificate details for www.tropiconctf.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgISBEIES4in1QlqyZjsVBOTZEhWMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA5MDMyMjAwMzdaFw0x OTEyMDIyMjAwMzdaMB4xHDAaBgNVBAMTE3d3dy50cm9waWNvbmN0Zi5jb20wWTAT BgcqhkjOPQIBBggqhkjOPQMBBwNCAASkRHqhJF7cPSXF0nZPJ6xevjbVwclGlb1I OHyzozdsenYzOveQ+hQiafGrLmF+9IHLM/32PCwlW/3uIMTZWGeQo4ID0jCCA84w DgYDVR0PAQH/BAQDAgeAMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAM BgNVHRMBAf8EAjAAMB0GA1UdDgQWBBSK3HYoPrCmNhwtKzSoLb1a0Kx7rjAfBgNV HSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBvBggrBgEFBQcBAQRjMGEwLgYI KwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5sZXRzZW5jcnlwdC5vcmcwLwYI KwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5sZXRzZW5jcnlwdC5vcmcvMIIB hQYDVR0RBIIBfDCCAXiCHmJhY2tzdGFnZS5nbG9iYWxjb21wYXNzaHViLmNvbYIm Y29uZmVyZW5jZS5wb2xpY2VyZWNvcmRzbWFuYWdlbWVudC5jb22CE2V2ZW50b3Mu cWRpZ2l0YWwubXiCFGV2ZW50cy5hYm91dGdvbGYuY29tgidldmVudHMuYXNpc3Rl bnRlc2NvbmVjdGFuZG9lbm9heGFjYS5jb22CE2V2ZW50cy5jdWx5dGljcy5jb22C GmV2ZW50cy5lY2hvZGV2ZWxvcG1lbnQub3JnghpldmVudHMuaW50ZWNobm9sb2d5 LmNvbS5hdYIVZXZlbnRzLmtvYnlsZXJuZXIuY29tghNncnVwb3Mudm9rYXJpbmUu Y29tghh3d3cuYmVybGlud2VsY29tZWRheS5jb22CFHd3dy5nYWJjb25ldmVudHMu Y29tghx3d3cubnZjaGFydGVyY29uZmVyZW5jZS5pbmZvghN3d3cudHJvcGljb25j dGYuY29tMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYI KwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBQYKKwYBBAHW eQIEAgSB9gSB8wDxAHYAdH7agzGtMxCRIZzOJU9CcMK//V5CIAjGNzV55hB7zFYA AAFs+VvJ7wAABAMARzBFAiBrGLUkFVLlrDFHDY1QPWqbfnXzbyXfXGwIh0jS2n1R uAIhALKsdD8MPlR90X267BLiwtUoqHiG1KyCPkNZpbG2yw/gAHcAY/Lbzeg7zCzP C3KEJ1drM6SNYXePvXWmOLHHaFRL2I0AAAFs+VvL1AAABAMASDBGAiEAxjducKoo 44Vr82p/2SgRNG+28Nhfmxe70zxj2Mi7mIYCIQDbX1cYEM8srmek8c+kNTbmeS2C Z/lXPeomPSSHlmWH3DANBgkqhkiG9w0BAQsFAAOCAQEAPzUuKzBuaLxfXF4bkOIP bC/BXRAjfdb8RN4tzmgX5FhLsGe9MiiKz9c+k9j5wlpdTKzdElqvpiMIikt0IbJa gJwjeCkRnWU8i61Fo9XJF1HSvVbwLDeUeew2LarYZvToFVWASQCeyICqDd6HIDcm XOFCpDV8cQ3Wet0pVC7KpOo+wa0d7E4hn8+fotlWfEX8mjw5iXKk9o1CLbJ5FEnA 2qBvvcyrpZkUXSWsJBnLEJ1kF4E0BibZcMZXKvODO9pWVzteWBWT5OtlOfLkL98U FTiyQnSVJFj5ZFS+haCcxxdRdxxsJoKJwcTfxu2B1ez+IfbWv4bgLNLrdQ1QM3Ec rA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEpER6oSRe3D0lxdJ2TyesXr421cHJ RpW9SDh8s6M3bHp2Mzr3kPoUImnxqy5hfvSByzP99jwsJVv97iDE2VhnkA== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 370913489049775195878865384200171463919702 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-03 22:00:37 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-02 22:00:37 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.tropiconctf.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey) . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1) . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits) 0004a4447aa1245edc3d25c5d2764f27ac5ebe36d5c1c94695bd48387cb3a3376c7a76333af790fa142269f1ab2e617ef481cb33fdf63c2c255bfdee20c4d9586790 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits) 0780 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 8adc76283eb0a6361c2d2b34a82dbd5ad0ac7bae . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (380 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backstage.globalcompasshub.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conference.policerecordsmanagement.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eventos.qdigital.mx' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.aboutgolf.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.asistentesconectandoenoaxaca.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.culytics.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.echodevelopment.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.intechnology.com.au' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.kobylerner.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grupos.vokarine.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.berlinwelcomeday.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gabconevents.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nvcharterconference.info' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tropiconctf.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016cf95bc9ef000004030047304502206b18b5241552e5ac31470d8d503d6a9b7e75f36f25df5c6c088748d2da7d51b8022100b2ac743f0c3e547dd17dbaec12e2c2d528a87886d4ac823e4359a5b1b6cb0fe000770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016cf95bcbd40000040300483046022100c6376e70aa28e3856bf36a7fd92811346fb6f0d85f9b17bbd33c63d8c8bb9886022100db5f571810cf2cae67a4f1cfa43536e6792d8267f9573dea263d2487966587dc . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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