www.indiedj.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:89:39:af:6a:9b:5d:89:21:3e:4e:12:ca:0c:f0:9c:45:49 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.indiedj.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:89:39:af:6a:9b:5d:89:21:3e:4e:12:ca:0c:f0:9c:45:49
Serial Number (int): 308032218873404024296470656974349861143881
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 7b:c7:b7:ad:9a:2a:b8:f7:86:8c:d4:6b:4f:77:32:72:b2:0c:66:7c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 30:c9:ce:1b:a0:eb:de:34:cc:76:7d:69:86:ee:ee:77:2d:65:cb:20
Fingerprint (sha256): ec:34:7e:4f:e2:89:d4:cc:9d:3c:4d:34:2d:ff:8a:6a:0b:3f:6a:81:41:00:ea:72:d4:1b:36:2d:86:92:25:af

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.indiedj.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.indiedj.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.indiedj.com

Other certificates including the domain name indiedj.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.indiedj.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGVjCCBT6gAwIBAgISA4k5r2qbXYkhPk4SygzwnEVJMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA3MjcyMzA5MTdaFw0x
OTEwMjUyMzA5MTdaMBoxGDAWBgNVBAMTD3d3dy5pbmRpZWRqLmNvbTCCAiIwDQYJ
KoZIhvcNAQEBBQADggIPADCCAgoCggIBANfd+S70dDAp8vP7ldZMyJkjwhI6WGUn
DFcglc8VgZ8t5yH15c9VOHwB6F2VaWJoBGJJbjkVkIUf2Aup6Ql6eycnSkTckLlj
o1+EnkGLDFPxvCbCsY+DQ9uvATGo2rwvL2Z7VLUoJjV/xD6duUa33hBS164hJAwo
tZf8ov2zdk0SbthYyQ/UQMlkNRnFAIYorQLQXTkP791vz8g3cnR5mwwgEbZU2azh
LhwtPPXrYWq4ENJJ84Yhw4q85VhRM+A+j92XIW1v2EwjbkXCkpHVRRWGj6iBCub9
VckwZBdCd8y2gbWAHPyW3xIb+lL6tRB0WyF8aWtiGVfZqll/nVH6Cm9mZXQYs8KI
1/EMD+CfDH1wioUro5EM3wVNiy9pkmbuShc26qyvK/jIqO5Ggpo63KIWP/0yvzuQ
S1bBCq9qVPSXP+vkbObYJ+xJlX2FPpyuROHBpE7dMDGINEEKwr4CcCnmenrCB51Z
mvcpjH34YMC5kigBPMH6xjXMy92STrYcggN97G10CvushAymzp87X8A10kn6aUNa
srvc9uwYpdf0s2r3bPz34ILXrBHcXsIpq0na/51jQmMTtVuYr4/gPpSFhF3axygg
HFHFbJ7AV7sxCSTh9bTDWdmxLwP3Pc3EX2/sMlPOsx7Q86x/ttulsVzq4vuM2XUD
qeUXwl37HKpBAgMBAAGjggJkMIICYDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYw
FAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFHvH
t62aKrj3hozUa093MnKyDGZ8MB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/z
qOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50
LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50
LXgzLmxldHNlbmNyeXB0Lm9yZy8wGgYDVR0RBBMwEYIPd3d3LmluZGllZGouY29t
MEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUH
AgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBAYKKwYBBAHWeQIEAgSB
9QSB8gDwAHYAdH7agzGtMxCRIZzOJU9CcMK//V5CIAjGNzV55hB7zFYAAAFsNej9
5wAABAMARzBFAiEAkChE9iIZ8DC4RMbpnj33Zg1PkMR6q3TDbBT6xU5BMt8CIE1k
z0/JHfzBbQgWFPhdACAGdez44zBglOd/5giUio6JAHYAKTxRllTIOWW6qlD8WAfU
t2+/WHopctykwwz05UVH9HgAAAFsNej91wAABAMARzBFAiBmNISTx7gJ9lHEZp6w
hD+wBQJYHTabzAa8uIumtMMrMwIhAK5cUf5heEDlL7k+LVleKzMlF7l4uu/RHL4e
uOpawkcCMA0GCSqGSIb3DQEBCwUAA4IBAQAL0vOtddFjbQtNX2UChuXwTQ1ao0hL
TBdaKBgyUjqtY74HaNAD8OquojXUWDWt2c4jiB1Fj75Hgi5IhdMbSUWRp9bbrzw0
k8Rtw5r2zSK/GANaWHMoWJfYEfQbmwJj4fdOjRfahhyHY7SnoK/pw21ihHCVWcaC
w3Sg02H5RxNSOZJjsPQICYsZLEQEBoa73flD3tBsDD5cFO/7aSwSgZckv/CkL2te
CoaRJSKm4JPbOOpbJY3UurGkOTY4ao7FKY+u+3T/uOYiuQkQzu8hxMDDxjkNXgCt
dzoIAB68M3acRKsjdFWojQ0jNiiBKErGt/0xo/UMC6W4BXZIvP7JGAQT
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 308032218873404024296470656974349861143881
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-27 23:09:17 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-25 23:09:17 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.indiedj.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 880660866629387796510511703809598688086882451693510560375970766436996861665433948935005957571195913624947785994728064155280369751601430384513835658844648275410634593574268674210243098319197816471532476575415604215547043860492706855782838525868204509975753499531037913665003304374135290082416707019809569609793865238313404169187949346632255331911022525740161639556780780749851836656580674564887184523679053972611510471437861469666328487867507760176436030578419788053769009501645147384669505257175792074378475990863181367396567348505565642937005600238658164848596171604648954208720630857341015638687756236490600755678800108415031235047879429986783183587360269589675391482148815916049722776955949797566071138790263752512579372038573799678681837622943917177359007372552907643830546667082383565843470814454607431380229775675909303217014192357860086152023252678240405790721186810270632051380014790995496826100416036153962036469301137917109497157584665740044383091974129176612604755003142557822999710355255096469063846888475777956548542914456889568429738294308778571545636776520037706487237036953305892427772744979826765256988807581249620329509494160327358925506780440908876809602416074033382550037711798264013626847669601622447581225069121
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7bc7b7ad9a2ab8f7868cd46b4f773272b20c667c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.indiedj.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016c35e8fde70000040300473045022100902844f62219f030b844c6e99e3df7660d4f90c47aab74c36c14fac54e4132df02204d64cf4fc91dfcc16d081614f85d00200675ecf8e3306094e77fe608948a8e89007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016c35e8fdd70000040300473045022066348493c7b809f651c4669eb0843fb00502581d369bcc06bcb88ba6b4c32b33022100ae5c51fe617840e52fb93e2d595e2b332517b978baefd11cbe1eb8ea5ac24702
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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