www.best-car-insurance.site
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:55:06:63:cf:cb:b3:33:18:d8:db:e2:bb:09:c6:1c:38:4d was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.best-car-insurance.site
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:55:06:63:cf:cb:b3:33:18:d8:db:e2:bb:09:c6:1c:38:4dSerial Number (int): 290269352603521778313034583643639087118413
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: dc:ab:20:09:b3:82:16:c7:29:78:c1:e0:a4:6d:2d:75:ec:e0:b2:da
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): f1:4d:c4:04:95:b4:bd:48:4a:31:b8:9c:b1:e4:aa:3d:9e:15:fa:1c
Fingerprint (sha256): d2:cd:50:52:aa:8b:41:77:05:f0:39:4f:b7:82:4d:bb:04:31:dd:c8:7a:09:13:0b:0a:f0:ba:ce:32:d7:70:7e
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate www.best-car-insurance.site
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.best-car-insurance.site
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.best-car-insurance.site
Other certificates including the domain name best-car-insurance.site
(limited to 100 certificates)
best-car-insurance.site
www.wahpetondentist.com
onlinequickbusinessloans.website
drj.bible
best-car-insurance.site
562leaf.com
best-car-insurance.site
best-car-insurance.site
radhakrishnamandir.org
cbdoilpatches.store
mbadegrees.website
www.best-car-insurance.site
www.best-car-insurance.site
avionicsresearch.org
kihealing.com
sportswipe.com
www.clergystole.com
www.wahpetondentist.com
onlinequickbusinessloans.website
drj.bible
best-car-insurance.site
562leaf.com
best-car-insurance.site
best-car-insurance.site
radhakrishnamandir.org
cbdoilpatches.store
mbadegrees.website
www.best-car-insurance.site
www.best-car-insurance.site
avionicsresearch.org
kihealing.com
sportswipe.com
www.clergystole.com
Certificate
The complete raw certificate details for www.best-car-insurance.site in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGbjCCBVagAwIBAgISA1UGY8/LszMY2NviuwnGHDhNMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEwMjgxODEzMzFaFw0y MDAxMjYxODEzMzFaMCYxJDAiBgNVBAMTG3d3dy5iZXN0LWNhci1pbnN1cmFuY2Uu c2l0ZTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAMZC6aNIuvlnD15B 26DibOxULRvFgjAFvVHPdHgoLLhY2C6VG24salU2zAaOa43Di9FYRYtvPogQI7Zu AXJTpliYrL6L2DiTv26loTmmhcvz3tb1TUXf2qBTXLMEz7LbxPVoUdzC9UifYzsi zBDyShW5KhsrTJErmqN80287hNrY2Y4mOPAKr44/JFoEaNLDyp0nHNG57aF5vtpu KFpty2q5uuWGsF06KP27ErZSk7ayFkm1fydn26Q3b4P8BEj/grcLO/U2vuJ8WnvW VZSk01O07gZltJ7KnrmTMvuLipdz8q6ZZBJKO9xfd/NI7b7W4uuhEgMbj10mRWsw MSWKd5Q/u6lQxb/qgN3OmpLgOCgAFi9cJ2atzQdws4cWqYK2hG5xJB1Vx38/pWg+ EOy9oqWGMp+wcq63lc1TXX9plxR+08QBXBXqNzTMFbz471NgsTFQnvbwnta9l7uP WV9GwqJeEQosmNZZMxlzmnNlD4NypxracFVjM0RCf/dGODqxsgHwnVdRHHI96AjF YCXGos1KPT0CHL3siaqiSVEDpu+dbIrCTqnBSegIAV6INjxfd6liu0jXKNM3H0iI 0fOOcS+6sOmUcrd55LxfExYY4sbyq9Nn6/xlwU9tWMJ5Dl7e6kDtmnesAoV4vjQD dF30cIdGfjc//9momB4AS1oatFm/AgMBAAGjggJwMIICbDAOBgNVHQ8BAf8EBAMC BaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAw HQYDVR0OBBYEFNyrIAmzghbHKXjB4KRtLXXs4LLaMB8GA1UdIwQYMBaAFKhKamME fd265tE5t6ZFZe/zqOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0 cDovL29jc3AuaW50LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0 cDovL2NlcnQuaW50LXgzLmxldHNlbmNyeXB0Lm9yZy8wJgYDVR0RBB8wHYIbd3d3 LmJlc3QtY2FyLWluc3VyYW5jZS5zaXRlMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcG CysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5 cHQub3JnMIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDwAHYAsh4FzIuizYogTodm+Su5 iiUgZ2va+nDnsklTLe+LkF4AAAFuE8mhsgAABAMARzBFAiEAyl0YxmRBWah0U2F4 E1aC0Ly6eZPWK0m7lt8itSS5aToCIHhP9mVQujDdKbvlxz2ZzIk3HiWKEtrJu/vT UfnHWtSsAHYAb1N2rDHwMRnYmQCkURX/dxUcEdkCwQApBo2yCJo32RMAAAFuE8mj 7wAABAMARzBFAiEAh4M65m0GqyTXLchiwX4FJrxjzE22ok3auCzVBd+gxOkCIHzv iu0RFrAKXNUeyLbk229XHREDdlCzpbtYv4oAsPAbMA0GCSqGSIb3DQEBCwUAA4IB AQARYF5u0I1RG0y3g6QdqacdDpWv7Ieju93zYwhi27tSna/x5ADBH5xyXV1Hl5H3 MaQpzcfgsVUWZUWHbN5FtCkhhf+gsTBJDMC9qz3Mmq1il+x5ZSviKboHl9KBzY1t pANbggd1UksbhQa9TpsgUA8APtdCIUlY9yBN+uLf3gDqdjjvUzoYmHuAUno6hWEX wDx7i0i/l+1wD7nG4Rl62M36UhcDUutqR66uWR6DCxKFuSr6113dVwhqwtPDOPha d/CF8/r1RRhU7iFkQHJ1Zwh0oFynG7YFumZAUCryeVs+dFatYolZElH9yghe0dT8 Uvgzx/5g0sbxR0yPleBtfKXr -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAxkLpo0i6+WcPXkHboOJs 7FQtG8WCMAW9Uc90eCgsuFjYLpUbbixqVTbMBo5rjcOL0VhFi28+iBAjtm4BclOm WJisvovYOJO/bqWhOaaFy/Pe1vVNRd/aoFNcswTPstvE9WhR3ML1SJ9jOyLMEPJK FbkqGytMkSuao3zTbzuE2tjZjiY48Aqvjj8kWgRo0sPKnScc0bntoXm+2m4oWm3L arm65YawXToo/bsStlKTtrIWSbV/J2fbpDdvg/wESP+Ctws79Ta+4nxae9ZVlKTT U7TuBmW0nsqeuZMy+4uKl3PyrplkEko73F9380jtvtbi66ESAxuPXSZFazAxJYp3 lD+7qVDFv+qA3c6akuA4KAAWL1wnZq3NB3CzhxapgraEbnEkHVXHfz+laD4Q7L2i pYYyn7ByrreVzVNdf2mXFH7TxAFcFeo3NMwVvPjvU2CxMVCe9vCe1r2Xu49ZX0bC ol4RCiyY1lkzGXOac2UPg3KnGtpwVWMzREJ/90Y4OrGyAfCdV1Eccj3oCMVgJcai zUo9PQIcveyJqqJJUQOm751sisJOqcFJ6AgBXog2PF93qWK7SNco0zcfSIjR845x L7qw6ZRyt3nkvF8TFhjixvKr02fr/GXBT21YwnkOXt7qQO2ad6wChXi+NAN0XfRw h0Z+Nz//2aiYHgBLWhq0Wb8CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 290269352603521778313034583643639087118413 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-28 18:13:31 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-26 18:13:31 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.best-car-insurance.site' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 808835852759160751514060298753503915149974488092415433882296187263077374400048413738705294083404738460018067936141623091358672641785837372788965244169978646301644513337660428325745420371798656622392678563015319132522059431177288015282424169849460681702531599352770786531297198221600328873651982049880928002343371270345376318122632948599981043030891703247294520777859682356306826860313248930066604887463097372759679435893242399356547603955134678784509347733533277292572705501117347517035963229965932078417990050909286685945550461552460455161992216666820191005636625659989008818280349587846962161781924701848709347900903434235674653254262843821533910863097336862603751288559955722214571266694329892556393385136426033027669047087323913082508377403469617271835484235460051480235814065043497725751131660693566701410201976389595563078947327835163028730540713877815651181373026780158468421885159413764167041218379232038525460712095527966767482328872116762062299451761428399544964911687092960861032825764125390018129592465510768505812047183339206654715835835510774091422043823631424858559544381123892500144076527024355608168014510842728248148521879406641043397283012021662619794921061168475058420357118581590840017793127800416873942852327871 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) dcab2009b38216c72978c1e0a46d2d75ece0b2da . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.best-car-insurance.site' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016e13c9a1b20000040300473045022100ca5d18c6644159a874536178135682d0bcba7993d62b49bb96df22b524b9693a0220784ff66550ba30dd29bbe5c73d99cc89371e258a12dac9bbfbd351f9c75ad4ac0076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016e13c9a3ef000004030047304502210087833ae66d06ab24d72dc862c17e0526bc63cc4db6a24ddab82cd505dfa0c4e902207cef8aed1116b00a5cd51ec8b6e4db6f571d11037650b3a5bb58bf8a00b0f01b . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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