news.lowercarpaymentsnow.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:f3:1f:2a:eb:61:fd:5f:5b:21:3e:a6:1e:2f:7a:59:28:63 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=news.lowercarpaymentsnow.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f3:1f:2a:eb:61:fd:5f:5b:21:3e:a6:1e:2f:7a:59:28:63
Serial Number (int): 344066901875535981024104605304004841908323
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 72:c6:e1:84:01:a2:7c:d0:a9:55:33:5a:58:26:a0:4e:6a:54:db:39
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 0b:30:13:fe:c9:3d:2c:b1:de:1c:93:36:af:69:b4:fa:b3:21:eb:6b
Fingerprint (sha256): e1:65:a4:2c:a4:3f:f8:91:22:34:6f:f5:85:cd:22:03:21:7a:7f:6d:10:70:9d:d9:a9:3e:c2:c8:9f:97:30:89

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate news.lowercarpaymentsnow.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for news.lowercarpaymentsnow.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

news.lowercarpaymentsnow.com

Other certificates including the domain name lowercarpaymentsnow.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for news.lowercarpaymentsnow.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGcDCCBVigAwIBAgISA/MfKuth/V9bIT6mHi96WShjMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEyMDExNDE5MjVaFw0y
MDAyMjkxNDE5MjVaMCcxJTAjBgNVBAMTHG5ld3MubG93ZXJjYXJwYXltZW50c25v
dy5jb20wggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDDHdlsbbMwEMU8
wp7ols9ZY98tm5qO2Ot2gc6oy1vussGzpf9wofeDNPj8LACglUzLofxrLoDChQyS
ZUW7fAqG+UP6qBT7j023PR67SarQ5KAXZW2ASDnzdzdP2PQ6RclcLVU+qgKZ8puM
876AGhxV7xyAKGyfLFDAaV/l6Vaxpa5S1qs0LstZdW37VZyBNMYLUSuz0Neq234s
u48/evwq7WDiZ0YQteK385CQXximvmBKV8LTq/JW6pg3KPoV/VazOwz4rTaFNE5j
Dcekselt3Db7LBp7fUsqBX/JO04aXqCz6Bk2K6QOkESVhGWVBd8tiOjKM2dU7hDl
Slr/BCQco5Nc4pxASQRtQNoR90eLxA21dvcrflTqR+eQ+l9GlXJUGeSu5eNFhPwg
tcl0q5Msbon5SyPhncoXWX3t40iUJtNSaW1EhXuG1tedKzYjVCbS4G5RCJHW7i2e
B4virKq7aBH3Jgp2llSrMyBS6VuTGm/AOTOMIqRrCEzQ+h1EBIKmK20JaC9hQcyi
CISi1bk2C+5QYYzlBit72chBthpa6Ia0U7QmutShfRmh5wxnoMpZSjZOFE4WJlv/
cu343iAGa9NB1AZ1j62pZ2icnrUFVGfFxpH2wA2LXUf9m0xML49uvRmRaFf5dxvr
Uk4FQosZ8vscXb8pY8h3bOd08BJDhQIDAQABo4ICcTCCAm0wDgYDVR0PAQH/BAQD
AgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAA
MB0GA1UdDgQWBBRyxuGEAaJ80KlVM1pYJqBOalTbOTAfBgNVHSMEGDAWgBSoSmpj
BH3duubRObemRWXv86jsoTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0
dHA6Ly9vY3NwLmludC14My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0
dHA6Ly9jZXJ0LmludC14My5sZXRzZW5jcnlwdC5vcmcvMCcGA1UdEQQgMB6CHG5l
d3MubG93ZXJjYXJwYXltZW50c25vdy5jb20wTAYDVR0gBEUwQzAIBgZngQwBAgEw
NwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5j
cnlwdC5vcmcwggEEBgorBgEEAdZ5AgQCBIH1BIHyAPAAdgDwlaRZ8gDRgkAQLS+T
iI6tS/4dR+OZ4dA0prCoqo6ycwAAAW7CC4UQAAAEAwBHMEUCIDrTcLBK9HdsxFxf
Eo+q7VpNOxA8jg0vj71E5h2Smjn7AiEAz5z/T2863zFkZibBpmeWaqKWqs+Uog8H
1LT47Xe90eIAdgAHt1wb5X1o//Gwxh0jFce65ld8V5S3au68YToaadOiHAAAAW7C
C4UxAAAEAwBHMEUCIHZy3BeeM5tD4ce05AM+Y6ELW4Loc41kUAbfT+kL2XINAiEA
qq6hRx1znT/ZJU0RTyYm6bX47C33mvV7KnjvDqp4BLQwDQYJKoZIhvcNAQELBQAD
ggEBAF0qEpWQVVJUmMYKqA4ZTE0V6fEl3OqrD30f61OiU/e5r7b4fvNk1JxmYpIL
TFMQYfy8Qo6RXa0wbZskdVYazv030uXpM/JeZIsN2Ch3gDz62/c7VbAaYGZlSr2z
4i7tu3q4QU8sI3d9dFWk0Dt7+6yeP/IqgqObp9a4KYnEt4vlse65DAop3kJF9/1a
EhmkCA4Vt0SlTDDGICUlLZuPWRTrjcocWowFJvKziRrEgFGkfYrO06+QUm7G3RUx
cv8nc+lrAJqJpE/o27aKEv2DhJ+JJFMT7pbO/fYNPg6t4GotpWjV3iPgZH6KH94S
pevHo87yzxQ2Z01cv71epj73RFo=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 344066901875535981024104605304004841908323
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-01 14:19:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-29 14:19:25 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'news.lowercarpaymentsnow.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 796006275152542497645572276339812519296712546917156101598190927072879389385490528408179568582904558989306387401945706008933943149691586070894662986168212725060438248954394795506113815486030686855632217199062869532122076353200040610780296369667563789294481809020330351375583139258810687793783629123095207338151057763499399299591737530149265775974411038636609104877975591725536300435086167415570490191654808833672796985706619696047376383823936754757165305254375239950706970427854640829309990566588516008519291820521756530757382977776264662066783983995354407337363616168065616873665299360878962788247966157868634920555687228117167837207734115508640327618099459977689844159767472878677941320723973173292658552056366311629226733396844184154818580233145898298454506355770060099719839917959388495669059666490742886391545740151367668638256194680991003772883251524909886254428096478678532910833881467882136778974687940260103560210044219994251618739508679003545056652135042587201147616731689034993825464759582316720613625127928745188813127577769867136038633466892382144560735439778021501354219571819994091396568182325924295220984670941839221036728905480040710198483450656765424409590291769678931951190015358378714461566478157477182305610122117
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							72c6e18401a27cd0a955335a5826a04e6a54db39
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.lowercarpaymentsnow.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016ec20b8510000004030047304502203ad370b04af4776cc45c5f128faaed5a4d3b103c8e0d2f8fbd44e61d929a39fb022100cf9cff4f6f3adf31646626c1a667966aa296aacf94a20f07d4b4f8ed77bdd1e200760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016ec20b8531000004030047304502207672dc179e339b43e1c7b4e4033e63a10b5b82e8738d645006df4fe90bd9720d022100aaaea1471d739d3fd9254d114f2626e9b5f8ec2df79af57b2a78ef0eaa7804b4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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