myappcity.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 04:ec:1a:1b:3f:97:e7:51:83:92:3a:19:87:e6:c4:10:6e:53 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=myappcity.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:ec:1a:1b:3f:97:e7:51:83:92:3a:19:87:e6:c4:10:6e:53Serial Number (int): 428790483730114899368190166269575604235859
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 71:6c:a1:94:98:6f:15:53:1d:a2:2d:b1:cc:a1:37:e6:c4:b5:c3:aa
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 5f:2f:53:3a:12:5c:b4:a9:74:f0:1a:e5:35:9e:5d:55:0c:34:fc:42
Fingerprint (sha256): e1:00:63:6d:5d:3c:12:ca:5f:39:6a:bc:a9:e4:19:77:af:a6:da:ed:f3:a9:23:4b:3c:71:ee:4e:c3:f7:49:d3
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate myappcity.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for myappcity.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
myappcity.com
Other certificates including the domain name myappcity.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for myappcity.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgISBOwaGz+X51GDkjoZh+bEEG5TMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEwMTAxOTI2MTlaFw0y MDAxMDgxOTI2MTlaMBgxFjAUBgNVBAMTDW15YXBwY2l0eS5jb20wggIiMA0GCSqG SIb3DQEBAQUAA4ICDwAwggIKAoICAQC2wB5VCr2DLfNNK1K1XpYYA2tbfGn8mgnm bhqQ6JUmLghhcZgDB35JbSruQL/jfLiGSTTY3hMdi4kOCMoP/uxiFKyTXC6gnNeh DtY5WaS2ks9gna9q4CIbtip21rtq0vUzElP/tfiwHD+9a7B+vqEIzEnXu+CRT8D8 1B2LtEXHdkzmH4KXGvp0hAAkJ3OKWH48LdZFGpQPQlMO9yHzVxnZKa3DyGsD4swU aWpuWZRrFR7cpF+pic567sUv7xn+nTGV3lmReGafppNpo22WSTglN6Pi00Y9mSKG 7TLJ+nQfcDspvk9ZyYo9yUIN6P7uIkT2x/GsKF+yhQ4bNy0U7WgTt6of8AFvCetX aXRg4kOZdgQRZVcn2W+PDtETavHkaFJ+PeMtHt0sHjfWUAq5zV1GxbuMAttkkviq fAywHBhZXRLaiA5HGF15C+NyyBDQJChpD0MOBMY01bWjdOi6iheMGElntIg3oWPu /8RkPi/YLUVvCoY4+DTXCUARSLHm61GpGoFZB/D1SF+CA5oCMWvKD4ZOOiYduqb7 N2CVtj6G9kY1nVnYVWjHKrej0LsNn7cifpndZDRWIkxUz21NHc5pjhrauIMLqQEs oCUJ+4k8E+v+xA4repiFCHQh81m+rXSaBip263qTQIZuywMVOeMMINo1XRQ+fA6y jhQnU3EbzQIDAQABo4ICYjCCAl4wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQG CCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBRxbKGU mG8VUx2iLbHMoTfmxLXDqjAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86js oTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14 My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14 My5sZXRzZW5jcnlwdC5vcmcvMBgGA1UdEQQRMA+CDW15YXBwY2l0eS5jb20wTAYD VR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYa aHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEEBgorBgEEAdZ5AgQCBIH1BIHy APAAdgCyHgXMi6LNiiBOh2b5K7mKJSBna9r6cOeySVMt74uQXgAAAW23Wc5CAAAE AwBHMEUCIQC7JL+ZCfFRZGQD7zn0OreGZ/xLQG8YtN9c2SiadCsDUwIgeRcHMGox yPvYinJpfPRqEnWRmF3b+bntyVZxYOeJOSsAdgBvU3asMfAxGdiZAKRRFf93FRwR 2QLBACkGjbIImjfZEwAAAW23Wc51AAAEAwBHMEUCIQC5wyVShSbiUbxNoPIMtGiM Kz4EPNHJAM8Q0Q3BYjIhjAIgIt0KSzSwhkqTjT8tzs5Wf+lseUXzshoFJ2UDHCR1 vDgwDQYJKoZIhvcNAQELBQADggEBAFJvJo68cJlkiO/b8A6UFeP0J7i3+6HcnaMC GOoxIl+Uft4sNY/vr1yDlyS0Fv6ca+qjIRDHGLgJZGRAM6VwlmyiVHjkQRd3jbPw FoMWLvTBEYVB4KyAtl63KYV1M9pDCjFfmek/9tHUZE2F7Bv90hhRTEsjIKmmrMeF 4GGUSUECoUU+yDQMdC8K9vlXbKGa+zvJwFUTYHPyuVvUvhsqvqFZCjnIxOlDuuie zsnIMx+CkiBKe5q21b4t4C01hQpEa1eGEHOV4O8NfoVMPgYuKZbjzyGyzdCVKCBP 9HMETwtb01C00N0ZtU7L8TTPI6NA0q3I80TLrqD9b8CPWxosous= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAtsAeVQq9gy3zTStStV6W GANrW3xp/JoJ5m4akOiVJi4IYXGYAwd+SW0q7kC/43y4hkk02N4THYuJDgjKD/7s YhSsk1wuoJzXoQ7WOVmktpLPYJ2vauAiG7Yqdta7atL1MxJT/7X4sBw/vWuwfr6h CMxJ17vgkU/A/NQdi7RFx3ZM5h+Clxr6dIQAJCdzilh+PC3WRRqUD0JTDvch81cZ 2Smtw8hrA+LMFGlqblmUaxUe3KRfqYnOeu7FL+8Z/p0xld5ZkXhmn6aTaaNtlkk4 JTej4tNGPZkihu0yyfp0H3A7Kb5PWcmKPclCDej+7iJE9sfxrChfsoUOGzctFO1o E7eqH/ABbwnrV2l0YOJDmXYEEWVXJ9lvjw7RE2rx5GhSfj3jLR7dLB431lAKuc1d RsW7jALbZJL4qnwMsBwYWV0S2ogORxhdeQvjcsgQ0CQoaQ9DDgTGNNW1o3TouooX jBhJZ7SIN6Fj7v/EZD4v2C1FbwqGOPg01wlAEUix5utRqRqBWQfw9UhfggOaAjFr yg+GTjomHbqm+zdglbY+hvZGNZ1Z2FVoxyq3o9C7DZ+3In6Z3WQ0ViJMVM9tTR3O aY4a2riDC6kBLKAlCfuJPBPr/sQOK3qYhQh0IfNZvq10mgYqdut6k0CGbssDFTnj DCDaNV0UPnwOso4UJ1NxG80CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 428790483730114899368190166269575604235859 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-10 19:26:19 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-08 19:26:19 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'myappcity.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 745556841622816072791929364823451807773289392620815915237542589783330968627907004753759725255972107846901594086825874150357750545302244196594465756814273308983554344778650132886434121147099798761604785181739556839998394480244538876501469333603037887607247782462406370706682873342551721684379925610189780973792403179129185019382470394378488711385936839089265548133339752502446975888134072298926391576170916294566826646126288679981639841358733309403116151774771431298905059865749016208523870475888606536600823048468381643784088422460688121684882102309128409928842296180717126075784482592318815860823736658000061187594176363593765369513709535826974875128406200087338114758380200235469425345133278454762630039650102756812570607004887113055571403376840474774012088254935114494050283533052541640649805347976161689430034515171905451808668823591551285800070189014034214743117311247564357936060670046521493274822912982359822913468733395084209377295298624240203889395069083582497765180555099982630124186931838028027975241706872161002642356347491610221362644017619500753551909464884202455929037730892265531030277252214210959203468437853914877337101139462510226180991289519763130798106541734684521964012467172741917284352705745943562203226512333 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 716ca194986f15531da22db1cca137e6c4b5c3aa . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myappcity.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016db759ce420000040300473045022100bb24bf9909f151646403ef39f43ab78667fc4b406f18b4df5cd9289a742b03530220791707306a31c8fbd88a72697cf46a127591985ddbf9b9edc9567160e789392b0076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016db759ce750000040300473045022100b9c325528526e251bc4da0f20cb4688c2b3e043cd1c900cf10d10dc16232218c022022dd0a4b34b0864a938d3f2dcece567fe96c7945f3b21a052765031c2475bc38 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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