equi.life

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:38:c9:93:4e:15:07:b3:b1:20:72:66:35:bc:c4:60:3d:18 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=equi.life

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:38:c9:93:4e:15:07:b3:b1:20:72:66:35:bc:c4:60:3d:18
Serial Number (int): 280660610021338390730813446930845841505560
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 8b:cb:44:fa:d1:f5:4d:38:33:0c:bd:50:d1:bc:75:e9:c7:55:40:08
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 09:88:ce:65:2c:cf:ba:eb:df:d1:c5:af:97:39:ae:cb:7b:54:68:cd
Fingerprint (sha256): d3:08:3c:fb:bc:f0:5c:2a:f4:04:e3:e4:c1:e2:74:0c:e8:40:b9:a4:d0:d8:12:ea:fc:f6:9e:ac:29:77:a2:ed

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate equi.life

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for equi.life

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

equi.life
www.equi.life

Other certificates including the domain name equi.life

(limited to 100 certificates)

Certificate

The complete raw certificate details for equi.life in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGVzCCBT+gAwIBAgISAzjJk04VB7OxIHJmNbzEYD0YMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEwMDgwNzAyMDhaFw0y
MDAxMDYwNzAyMDhaMBQxEjAQBgNVBAMTCWVxdWkubGlmZTCCAiIwDQYJKoZIhvcN
AQEBBQADggIPADCCAgoCggIBANYi851tugDxe3cfy6ADqI1/4hC80fEvLcZPzjRK
zmTBvNsn5IrM/P2ZqCFEFDuflWclWMjvcnqwAupYVVwLhGSa96HFqXWT6+2HYjN8
LK2rve6vhI5oJvDITK8aabJ2oH+MxLqter6I7m4AuX3i+MYVE1nE++AWGcufqqFt
yeNxPVPr7GL1PwcqgP13+hnvf/uKtLgkRC7FgleLwaGrZVyUGG9O1waulvJLrpTc
05UYDUEhCSAXhLS7RSubFiriIlM0pFIQkaAg0JUX2f8oRlAtviIrtuFtaHXRb8GE
vcHeW5sbH/E8Ibgr1dKXn1jH7nseci0y3DnR+kI1qP70sDxHj4M9o2EgOeXsmEtq
q5zZ33LiY6zdc56WHkzGwhVHeppcOluKXgSinGQi2H9T5WKLDiNFuY454yhmMBWH
FllUVDGq7hhB+45qodVpWE6WOqFNx4Hmdqga6095IxiHOhM6fSTClmx759I1plUH
WOpT6H6/MD17QM8jI0IwqlOgyQ8h80YljZ7LGuCKzR5K1LdkBOeQQny8b8efQBvf
SXzgcfj5qxeYkCbQPX33ICBCUA03qu/nZhKZRWbaFlh7ahnPNAUSLYdyY/Wravlc
hXA0TAbkQA9wGyS5v6hX6fszc0a5MulkcYLQiHJEvixgP1dznCq718RP6UZIDe3g
lJpfAgMBAAGjggJrMIICZzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYB
BQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFIvLRPrR9U04
Mwy9UNG8denHVUAIMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8G
CCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxl
dHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxl
dHNlbmNyeXB0Lm9yZy8wIwYDVR0RBBwwGoIJZXF1aS5saWZlgg13d3cuZXF1aS5s
aWZlMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYB
BQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBAgYKKwYBBAHWeQIE
AgSB8wSB8ADuAHUA8JWkWfIA0YJAEC0vk4iOrUv+HUfjmeHQNKawqKqOsnMAAAFt
qmPHlQAABAMARjBEAiBVjpHBYSNMrz0kCZjAVHITQjtQeqwu8YRgy9pdXmBErQIg
CLi/DH4ujRhZgBHYfnWWCBpx49AI86KJp2mXo/WL7Q0AdQCyHgXMi6LNiiBOh2b5
K7mKJSBna9r6cOeySVMt74uQXgAAAW2qY8e1AAAEAwBGMEQCIH2ZHjnKNVB4xG5z
/HpFKiy30P+dHrZmkOX7IPx4plBGAiA4+pCCCpjkIx8MeEr8IgJjIDbHHA3xI9zD
SoSBlP5Z+TANBgkqhkiG9w0BAQsFAAOCAQEAmcLowDYf+6BD6w/RwTBUZnmT131M
gWpSoOimw3gm2y1c/qcEVvI7v33GBkhOPht77vsFxQMx4I4iPEwBzTYNldz+149s
9P0MFv5nRUuKFgLQA9X2E6Etr8+lGW5mnUHJs5HE6wogorhdyodSv3ix7dlSMpYw
9wZj2Wi8vF0zM6cljg1nipq4d9js5o+pFc1BGHoTqlL8nlKamDRUq53tKFuyo5yv
U5uNwHHf6geNVhrdCQWDguDUzn2PDrR0zTdwofsn2DzzSRf5Gb7DSJy+KiDNarNa
yK0iCTYmZGimuZGTzZeAzhcfVvwu3eGb9syGnJV31cggq751Jkq/jgLwGA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 280660610021338390730813446930845841505560
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-08 07:02:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-06 07:02:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'equi.life'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 873600823419410140974553049678760308975363978820582764327665451113628746472668436410554223345794753056041689835423551830720489747848153376098657485122121214750483581404641250376450717768446263694010407371579963499747398646559418415472374543995379304884508120273810109130208582601419960028347046717856195759551387583417263497978094717781906677083474247716357311150999430235214051348466770183483239828573499161950642438353737489107463286376953400809889349457381180879161251027349644616201756038180580281530589188287220300986450344040741086210642798278598120909001464592841960595094137457833855848028636954537665816727161589377083027796683550080396356370825184450265211196853162031304311394732413608028042732172759025261474269008103324013665812470994744552145985401911834196648603112427969147842841792987974850137354047960466832543507952800542743038440132288697571586687136142215420836507084767385292562337130775949369480950850783807057947994022568837359303926769224269311527288127095428566887732524203010148437441666132198320469607965746735222622482847517129820273447708479229566711954505915524590246307227496161317783391026047182860522697124705637014925346629118738315481976164767218007148055317187184276941579726160293710612642699871
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8bcb44fad1f54d38330cbd50d1bc75e9c7554008
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'equi.life'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.equi.life'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016daa63c79500000403004630440220558e91c161234caf3d240998c0547213423b507aac2ef18460cbda5d5e6044ad022008b8bf0c7e2e8d18598011d87e7596081a71e3d008f3a289a76997a3f58bed0d007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016daa63c7b5000004030046304402207d991e39ca355078c46e73fc7a452a2cb7d0ff9d1eb66690e5fb20fc78a65046022038fa90820a98e4231f0c784afc2202632036c71c0df123dcc34a848194fe59f9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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