directastic.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:53:3f:61:30:bb:d2:f5:29:f4:3d:c4:2a:b7:61:9c:19:84 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=directastic.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:53:3f:61:30:bb:d2:f5:29:f4:3d:c4:2a:b7:61:9c:19:84
Serial Number (int): 289664540254684975588063079836356569733508
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d9:aa:db:4b:2e:a9:e8:67:76:5f:72:3f:fb:51:3b:eb:44:50:36:44
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ef:f0:9b:8a:6b:e5:f7:1b:1e:f7:b3:98:f7:78:66:0b:14:d5:75:a6
Fingerprint (sha256): d4:5c:68:b4:73:c4:02:93:ba:30:54:5e:00:94:d1:37:f8:fa:f9:36:1f:4c:37:38:5b:0f:3a:51:46:f8:78:41

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate directastic.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for directastic.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

directastic.com

Other certificates including the domain name directastic.com

(limited to 100 certificates)
www.directastic.com
www.directastic.com
directastic.com
directastic.com
www.directastic.com
www.directastic.com
earnfromhome.de
www.directastic.com
directastic.com
directastic.com
directastic.com
directastic.com
velocitymania.net
directastic.com
directastic.com
directastic.com
directastic.com
dominare.com

Certificate

The complete raw certificate details for directastic.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 289664540254684975588063079836356569733508
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-27 23:22:31 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-25 23:22:31 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'directastic.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 919141156903309836053193333437377292916627210115757512617995644169839388412527595582560675315581578194917493028427373947461395193927594704685533864291267990767024944414292153749364034614623103252312861902148519132914328976182350045611041610140828225596584515459543861324587329819025101294088598312104101062422507856709814465359347746686806633147743615420044680732104457371465190595699535983087247218522801350752880299302468071336792138158578907421796169701068168475994163473962304818719479203350290658368120263039858498554467081139095772398188367988591167128652479102423143457679146282842913629718809540350515217402553079115073066598428975146560491840485463378009831229391417317998693066280446804111427020280259875260736814769932435346205439313606150610079492427648171739108189408154409053449043274605010050930885134957576990077160290005563687631237002710429287124343366658360734148349199201341789649193466615657947722889854705733957377497553452174595092892918870756610276210407861162777884183677101614955881212857802399884252425427327285323900633398513695517536759710316851011484845429291338905870598560950239290020562105281365308957055181493414593680435621094731850424000463030971144992710836710962652374494671209030030867790259489
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d9aadb4b2ea9e867765f723ffb513beb44503644
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'directastic.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016c35f51e3200000403004730450220649616e984b2a523bb4f422c96f9460e25d76720618453aaf6642d4522512a2302210089e66027ad2cbeab1249870b74b1b6051f9d6dffce43512dd29cb38fade4d95900760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016c35f51e490000040300473045022100bea81204c73bab67ece66ee3e93536a99523391189af7e2b6aaeefd1ab52355602201bdff63696890b3c2b6a055eb9e70d98f6bfa7042b9f0a666501584ec4e3cb17
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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