virginiachronicle.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:9e:52:83:2e:06:0b:0e:0d:e2:e9:1d:29:82:46:6a:79:53 was issued on by Let's Encrypt.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=virginiachronicle.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:9e:52:83:2e:06:0b:0e:0d:e2:e9:1d:29:82:46:6a:79:53
Serial Number (int): 402323435520561727046414696651799795497299
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: a9:f8:a3:b4:d9:d0:1e:1d:28:c0:97:9d:f0:2e:43:18:9a:30:e0:42
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 3d:6c:f6:0b:5b:fc:51:2b:63:cd:1c:a2:44:62:1c:96:e0:fa:44:52
Fingerprint (sha256): d2:09:7e:93:c1:1c:00:25:71:1f:c6:5e:6f:c2:ad:13:ca:7a:06:c7:b0:54:15:1d:f5:64:f1:61:8c:1d:0e:a6

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate virginiachronicle.com

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for virginiachronicle.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

digitalvirginianewspapers.com
virginia.dlconsulting.com
virginiachronicle.com
www.digitalvirginianewspapers.com
www.virginiachronicle.com

Other certificates including the domain name virginiachronicle.com

(limited to 100 certificates)
virginiachronicle.com
virginiachronicle.com
virginiachronicle.com
virginiachronicle.com
virginiachronicle.com
virginiachronicle.com
virginiachronicle.com
virginiachronicle.com
virginiachronicle.com
virginiachronicle.com
virginiachronicle.com
virginiachronicle.com
virginiachronicle.com
virginiachronicle.com
virginiachronicle.com
virginiachronicle.com
www.virginiachronicle.com
virginiachronicle.com
virginiachronicle.com
www.virginiachronicle.com
virginiachronicle.com
virginiachronicle.com
virginiachronicle.com
virginiachronicle.com
virginiachronicle.com
virginiachronicle.com
virginiachronicle.com
virginiachronicle.com
virginiachronicle.com

Certificate

The complete raw certificate details for virginiachronicle.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIF3TCCBMWgAwIBAgISBJ5Sgy4GCw4N4ukdKYJGanlTMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAxMjgyMDU4MDRaFw0y
MDA0MjcyMDU4MDRaMCAxHjAcBgNVBAMTFXZpcmdpbmlhY2hyb25pY2xlLmNvbTCC
ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKRRVaLKgRyDQorh9u1h2pjo
pRa1LTi3gYpd49Y5UBuNUHr1LQQ1s1eaxIMdMQB5QDi1A1k9mlJqcy7aZZnnBH3Q
AhMKboOE7iJOR1XapHtPh1+M2WtkvmjOcuiIHTU1mzPxr3zxqHYhbNz98YBCg9ob
/aOogCqhByvWlPXE5ELw8ipBDYFucJFNj5FVDsSzcR/0sCZG7IdQ9WmlvY5tWiZw
jCa1vZfzEWaAaIGlTBCinogolJv3Li4D/vmwcHRCqlqWoFdMdFpYoItNdBaer7nS
zDihnXHLMep39cKMRVvBI2i0NfsAeO5VXW9PGlHO6+koQ1ku3NYxKiAjjbpw++8C
AwEAAaOCAuUwggLhMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcD
AQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUqfijtNnQHh0owJed
8C5DGJow4EIwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYB
BQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2Vu
Y3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2Vu
Y3J5cHQub3JnLzCBmgYDVR0RBIGSMIGPgh1kaWdpdGFsdmlyZ2luaWFuZXdzcGFw
ZXJzLmNvbYIZdmlyZ2luaWEuZGxjb25zdWx0aW5nLmNvbYIVdmlyZ2luaWFjaHJv
bmljbGUuY29tgiF3d3cuZGlnaXRhbHZpcmdpbmlhbmV3c3BhcGVycy5jb22CGXd3
dy52aXJnaW5pYWNocm9uaWNsZS5jb20wTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYL
KwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlw
dC5vcmcwggEEBgorBgEEAdZ5AgQCBIH1BIHyAPAAdgBvU3asMfAxGdiZAKRRFf93
FRwR2QLBACkGjbIImjfZEwAAAW/uKVcQAAAEAwBHMEUCIQDUWSiVI+6OJ7hJBAwe
TnyN0RI4dy+YKCr4JGCgUAi4swIgXJlIFiTzZfiW+zZEBZKum4Ejdr21NNbrnJK1
rYL4DyYAdgAHt1wb5X1o//Gwxh0jFce65ld8V5S3au68YToaadOiHAAAAW/uKVcS
AAAEAwBHMEUCIQDCzaTL4FLF4RB6mvSg320e5w3FQmzhACO8HWSTvpfbEAIgaPM3
p5rV+RLLDRzXgkh2JTtVtteckhGChOenYO5Ow00wDQYJKoZIhvcNAQELBQADggEB
AAutLJ0mgGmkS21WI672q+wbJikAedG4S0aohLY2kgH3iwKD+EZOPcw3ZVOKgYjq
T9cXZ5SMz0tvEABcYxg+SDUz5DvGRsQTL6aaAwt4EoRS0R7YaMjA0lBBQ768lXDH
4TZp0p9Yl5PDaHOGMU/8t34yHdXyioHPt3nSb3g7SovGzH6E7BBjstmJXTjpTBba
LzAHdNcsOhSdGrwu5zGqOMC+bAmYon9o6HV8AjdDEcHJ75ECmP0W/fAa3SX3NSg4
pEuXL1JljaNtfCTzFG+nEeyDlqOFH/3U/bYD7EYpgoifzq7djbCpPt7nIC3dFa6b
DPLA6nD0qU5oD9r/sUc3FZ0=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFFVosqBHINCiuH27WHa
mOilFrUtOLeBil3j1jlQG41QevUtBDWzV5rEgx0xAHlAOLUDWT2aUmpzLtplmecE
fdACEwpug4TuIk5HVdqke0+HX4zZa2S+aM5y6IgdNTWbM/GvfPGodiFs3P3xgEKD
2hv9o6iAKqEHK9aU9cTkQvDyKkENgW5wkU2PkVUOxLNxH/SwJkbsh1D1aaW9jm1a
JnCMJrW9l/MRZoBogaVMEKKeiCiUm/cuLgP++bBwdEKqWpagV0x0Wligi010Fp6v
udLMOKGdccsx6nf1woxFW8EjaLQ1+wB47lVdb08aUc7r6ShDWS7c1jEqICONunD7
7wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 402323435520561727046414696651799795497299
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-28 20:58:04 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-27 20:58:04 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'virginiachronicle.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20743189558729090933926958107938750285379316256084626686911584034703868368095837853392943501681919464847936396228240336219031445206300216158988472282342110557181186386377416047956927573302746171922007614757298975317322073119543852701927461563022380107806453561156383159803158702939525636917458774454716675238866793232559259489388242034378472418845432853034323849060455634339199867806910172575795886557350731540416114073169435295406592315490538467179206131303736223368390320410015801873736576885063616998728702343346947773443081072759863603110343109988454504961591458838436497448164133945085568257651050908969191144431
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a9f8a3b4d9d01e1d28c0979df02e43189a30e042
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (146 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalvirginianewspapers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'virginia.dlconsulting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'virginiachronicle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.digitalvirginianewspapers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.virginiachronicle.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016fee2957100000040300473045022100d459289523ee8e27b849040c1e4e7c8dd11238772f98282af82460a05008b8b302205c99481624f365f896fb36440592ae9b812376bdb534d6eb9c92b5ad82f80f2600760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016fee2957120000040300473045022100c2cda4cbe052c5e1107a9af4a0df6d1ee70dc5426ce10023bc1d6493be97db10022068f337a79ad5f912cb0d1cd7824876253b55b6d79c92118284e7a760ee4ec34d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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