www.epaleontology.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:08:65:ac:82:66:b6:6e:56:1e:5b:06:f2:68:65:0f:75:42 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.epaleontology.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:08:65:ac:82:66:b6:6e:56:1e:5b:06:f2:68:65:0f:75:42
Serial Number (int): 351306550409893419499201225632881285494082
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 51:a5:a1:bb:72:fd:3b:96:a5:32:f3:cc:e4:47:06:fc:06:fc:50:ce
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): bd:37:e7:a2:27:ad:9a:9a:73:a0:a1:19:4d:d1:2e:e5:1c:91:03:c2
Fingerprint (sha256): eb:52:be:37:f0:3a:1c:f4:de:cc:17:e6:be:19:8f:64:7e:87:54:41:a4:dd:7d:41:e4:90:08:4d:fe:ec:fd:e7

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.epaleontology.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.epaleontology.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.epaleontology.com

Other certificates including the domain name epaleontology.com

(limited to 100 certificates)
www.epaleontology.com
epaleontology.com
71470.com
www.epaleontology.com
modaintimo.com
epaleontology.com
www.epaleontology.com
petdoor.co
www.voxdox.com
epaleontology.com
epaleontology.com
epaleontology.com
www.californiaatty.com
linknex.com
www.epaleontology.com

Certificate

The complete raw certificate details for www.epaleontology.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 351306550409893419499201225632881285494082
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-11 07:37:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-10 07:37:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.epaleontology.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 793661793843281718527962826932629146304838092255077606005919388364266191717336809221034582829403375221360733310684289390550701387604368696972542256814208827230931193516183604638896700646717819560777616197253947290284423813053091495067514389995860782386381915229177970367119834636256418670660230370083688194671935459462597391112192054053651851456779154380066990234352643258891417931614653747082650802833115470397904481214178214632119861993854556305551728410746058454627015824156442938623431866485297887667292372130184334413904138936005941151064108702705681118043287562511493938792493255950432766260685776674580707947075597700912331956923536497794148159902560754330976280730969110734931219458458356957000841166178086070730170235084572784779774648231752394817594474284171831134768143875212459283306683678662463781853960199176580699307345883902008607469038234024521070142302424247636067185240048431983202280399995351856284567932435223233512502547349187154316705447665875832351126738438382302849203054635534213882224700877833210230026740609324309840321177507367570510169251144991920532002370524286333616003253076719038441388881562687156001410360929457684644531880119162339905424977686859977010597564495863695060691611832996110542320080187
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							51a5a1bb72fd3b96a532f3cce44706fc06fc50ce
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.epaleontology.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016ef41af95300000403004630440220649687299daed7b6316597c3ecef1dfc2778017dd24d37cd8e136c24dbd22318022006a5c113e6010a85cc017033990bfd1abca73ff1ef58fd50f46f35bdbbfe7bab007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016ef41af94600000403004630440220639ea8b7df6f41cd9910bf5c6fe167819038e3f9f51d6001dcfea98a767a8ca60220358477e59b979a24d8e80faa8ab14a3a38394207e5375ddb3d4ee7ee77f3c333
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00398df54cf18a0bb4886287292f6534ee8a9885c5cde300acb54d78b80d1198fdc4ad076659c65e3e178d4e8a7eb5622937959f2256339bc571b6da0a07a42092ed21145fd4cce2183e0bac27e9df8897627d7487c99ec27752cf6947350985af8e7ef2990f23ae7858ca00f63d2c64f31b8dae7f42f054fb256b30eee2dfc573642292950de64d18bdb1b218877f5e76492f4b18ba9f08a0e4bd433de4f1dd0439e34db74c0ffe5547a7d823075e5a2911918c3c64b17a2e60e4422a96f2a864012961bd2c257ece4942a599743c83cccf785419e638c372613348d01d7c8ee9f833f18ef0ea65e9e122fd0f7bb9b2febd33dc92c3d52cd511b627a4454027bf