blug.net

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:e3:2c:9d:f3:72:80:f6:7e:3e:34:66:3b:a0:b1:10:fd:25 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=blug.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:e3:2c:9d:f3:72:80:f6:7e:3e:34:66:3b:a0:b1:10:fd:25
Serial Number (int): 338640261246452553699559636810649453002021
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d4:d9:11:2a:96:eb:db:6e:6e:45:02:89:a3:dd:98:79:22:74:4e:15
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 59:db:fd:ad:06:6e:b8:94:4b:50:27:73:d2:03:45:68:9c:83:23:07
Fingerprint (sha256): dc:1a:e4:39:d0:17:f2:9b:1d:ff:cd:30:c0:60:51:cf:63:36:3c:04:ee:0c:de:20:14:63:30:30:3d:6e:fb:22

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate blug.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for blug.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

blug.net

Other certificates including the domain name blug.net

(limited to 100 certificates)

Certificate

The complete raw certificate details for blug.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 338640261246452553699559636810649453002021
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-02 18:51:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-31 18:51:55 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'blug.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 816564193650639665436010349373669475499867667033844191827270890152595783610321135800621172912545675556760769621808906947325136598603419403160480294546814636654332359445361949730436206427733427159219937123603079827423535603431228375900022602935859906457883845769950765883132813957270000694088255251400692606272824690167873270461661632509333521222030140638956933635039057759348816653856610979584950544742286643385809335856714593056636752436476300348548708731589034989642858562072970382312825725670597253903077054280595351426003308186740089470565639105845361449455264613278741370712702912365306842778316645499026900538366662909175015329535443331454356622640472283690262318061316950386884267353402273200350799831202021897941397781742982511888370216089376417949452179946004714121324728006858955492294802576393611379346427417658238100505635364008737802194135105124083661747193236814412947796453778006831586267212923381014323459029426665385530700943655696711515527980375650237917810546034867917556300917953663513537010279997289861829280552142449330096489317938227458402694946720163656521825369077136699328663220094515721649621239008321050382428683179104318855258441297380988108874850195500125361121417284108905299030867293421956440298224801
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d4d9112a96ebdb6e6e450289a3dd987922744e15
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blug.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016d8e0772c20000040300473045022100a8a1e54146b2427ad03e4bbcbe797d33df72d762c6bd3d5ecbe3c9ea6cc2a6dc02205072d6c47d765a6779ca7e6067a6e7a90ab123996b9abad93f0e108f4a41a2ac00770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016d8e0774df00000403004830460221009c564490e0c72babe37b75b7edf6dfbf7c1f039e31b2f4736f539a1c2d71e726022100e42d2ccbf945adde545a485e780eadfddb10e3ae7694da349a64b3b5d972b2e4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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