gaiasurfhouse.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:0e:91:71:0a:7c:1a:1e:74:f6:35:55:d1:a9:8e:d5:9e:f9 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=gaiasurfhouse.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:0e:91:71:0a:7c:1a:1e:74:f6:35:55:d1:a9:8e:d5:9e:f9
Serial Number (int): 353406421865524423930727598259129904635641
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 5f:72:66:14:d9:6a:25:f0:74:bf:42:30:90:a6:2d:8a:4e:27:53:03
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 95:ab:fe:b9:1a:2d:92:a5:c0:d6:63:53:88:09:01:a9:d8:33:2e:6c
Fingerprint (sha256): d5:71:a9:74:92:c5:4c:c7:35:3d:1d:54:8c:1c:ad:f0:e4:06:a3:cf:2b:2b:62:a5:46:2f:a3:e0:e1:48:65:18

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate gaiasurfhouse.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gaiasurfhouse.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

gaiasurfhouse.com
www.gaiasurfhouse.com

Other certificates including the domain name gaiasurfhouse.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for gaiasurfhouse.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 353406421865524423930727598259129904635641
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-16 23:48:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-15 23:48:55 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gaiasurfhouse.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 783119810916855823563418188478435518330189912159087546630359150891617833975618790642330382270412929445449273271705542258641677586358822507709859685122745372858032585750111809152316745561514832281370561632303218166383765244443092272818135589305682625806581122808268925290715020553321679043079346129055330598030142657855071037127816252861045177894402372224673789107409915729394360139979552775545194444555619948195574526035781330592365465420486243006618240403240361490730188388324932677036839688744404969997432145816769963794439409955901891724492204143461974053038196998542863397229718474357052489266919769030776402335141771493824926751358992333032331078580702492770554611991671224412257949686327538990756217205932204735285073117251170061412957844551650920600108953155376356721095033519817246173713172820466836332148133833967831708000738002472007075736939344560424596805429343832222163089426060614877713410818819502647380817073361365952120067894554316826624266029442524183889365490735646140925147595131471522730484999421005880831456675809409488975200739160005926834448457434694405986175264463801632903967577283161594917860104313085699931222991601516191482307938003933643640284568381239871482509243451212638190174413981855672275633837429
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5f726614d96a25f074bf423090a62d8a4e275303
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gaiasurfhouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gaiasurfhouse.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016fb0f97308000004030046304402202137b7bade429ba1f537ab14aebf2ea97e89c1bc518013e12ca1f049c088bfa002204b0963a1cc21a77770e0724883bd22f1b30d83db2feaf705e1bf7f9abe33b24d00750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016fb0f9732d000004030046304402203cebc433c836304afc1b237771242f761dd0878b5fa74ac7070b6cbbc6998e2f022001d958e614965180e1000c3136e18393ed5653caa52cc9c6ff5f14a11461db4c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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