directastic.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:18:30:80:3e:aa:97:29:b8:91:65:0f:c3:13:cc:c4:b1:2c was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=directastic.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:18:30:80:3e:aa:97:29:b8:91:65:0f:c3:13:cc:c4:b1:2c
Serial Number (int): 269568103430203797210696147701504569291052
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 5b:bb:8e:b7:67:4f:d8:0c:11:ed:06:db:da:bd:8e:46:11:6d:68:50
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 77:b8:eb:0d:cf:31:65:ff:b0:e4:73:09:e5:d9:d8:36:05:5c:62:5e
Fingerprint (sha256): e4:93:ee:39:64:ed:df:c1:b7:b4:22:c9:ad:01:e9:84:80:d8:f2:3a:7a:54:ce:45:2c:64:a0:da:b4:c2:20:27

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate directastic.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for directastic.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

directastic.com

Other certificates including the domain name directastic.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for directastic.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 269568103430203797210696147701504569291052
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-29 16:29:40 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-27 16:29:40 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'directastic.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 899515541810829014295555246311199248089633953196929990354634073579569167859813738822140078031740070893609064253529042730174272481917860038574288211740118848984923288993226727169672268703364215063008862003335296607807946433727115064569528092575886215513241808873427394013158661236685209809758038888215831696254873419698154841836332827710838811418667390543402956803785799933536313095148963199351844549840454016115372452722464298589198313903455227780096641257444304297450813306030927290690091575147336207971937585320601877328603948468653969193317443224598055845369361984781464059663338251448302812418525774586542898761417595405071368714373151961933549058649234595199373751182032239840243510847431518911782728114756765466965488652146995933112557568051587430456881555607816142497593677659083547205738051278522239995527881863874424036456101625335410982365098224738728167491890521558183741944741578004431594949272643193751966811258173576970601992674772813240805897509289451824742605044951329116084580703399496244253724320426413285449975216069382472437655481766655592114115635626684280679735347112505479772323935595170180212993874024027513171050914753138176323474305497254203453446108133713360894871974329733183851269919920807174119423099643
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5bbb8eb7674fd80c11ed06dbdabd8e46116d6850
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'directastic.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016eb8360ce5000004030046304402207dd0b03d559ce2dc667bf2dc42e81f35c6bffcc58e7cb5293d729aef0880086002203cbcc9043f2a61e7bd4c9e9cd4e5a7eafdf6d135d1fffdc17e36809164c7a4c900760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016eb8360cf00000040300473045022100f4664f55d9228150c5f7f6f16caf7487b692d385f56d504c43c7e8250971693702200e47f80e3090c5febd7d14d36bf7f060d483ecad9dccfbcb2ce8d157f7bfc3da
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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