blog.puget.tech

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:f0:ae:0a:43:df:3e:f1:9f:b3:b6:18:24:c2:98:65:91:24 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=blog.puget.tech

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f0:ae:0a:43:df:3e:f1:9f:b3:b6:18:24:c2:98:65:91:24
Serial Number (int): 343235964827149935742488827475792748712228
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 88:72:b1:49:02:4b:a4:aa:e1:82:80:64:af:ae:b9:af:26:e8:55:e4
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 2a:d3:04:00:ff:12:a6:35:06:20:be:5e:d1:d0:a7:a0:fd:92:cf:c0
Fingerprint (sha256): ec:4d:c8:a7:24:e1:37:7a:37:f0:6b:07:b0:37:59:32:c2:fd:78:6c:4e:bc:f6:73:71:fe:f7:26:15:f9:ad:fd

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate blog.puget.tech

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for blog.puget.tech

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

blog.puget.tech

Other certificates including the domain name puget.tech

(limited to 100 certificates)
www.puget.tech
projects.arturo.ai
puget.tech
www.puget.tech
puget.tech
clients.puget.tech
clients.puget.tech
portal.puget.tech
puget.tech
support.a-blogcms.jp
billing.puget.tech
puget.tech
clients.puget.tech
sni.cloudflaressl.com
cisupport.tekchand.com
puget.tech
account.puget.tech
status.puget.tech
invoice.ltol.com
srrit.tachihelp.com
projects.arturo.ai
clients.puget.tech
blog.puget.tech
www.puget.tech
support.deploypartners.com
support.a-blogcms.jp
blog.puget.tech
puget.tech
sni.cloudflaressl.com
projects.platinumwfm.com
clients.puget.tech
clients.puget.tech
support.getforsite.com
clients.puget.tech
billing.puget.tech
clients.puget.tech
puget.tech
billing.puget.tech
puget.tech
blog.puget.tech
blog.puget.tech
blog.puget.tech
www.puget.tech
support.getforsite.com
fee.stir.ae
clients.puget.tech
clients.puget.tech
status.crossknowledge.com
projects.wjddesigns.com
invoice.puget.tech
*.puget.tech
puget.tech
assets.puget.tech
landing.puget.tech
clients.puget.tech
support.sdatec.com
blog.puget.tech
billing.puget.tech
status.telehouse.com.sg
projects.puget.tech
www.puget.tech
puget.tech
status.puget.tech
portal.puget.tech
billing.puget.tech
puget.tech
sni.cloudflaressl.com
clients.puget.tech
community.tago.io
support.sdatec.com
puget.tech
invoice.puget.tech
blog.puget.tech
puget.tech
blog.puget.tech
blog.puget.tech
support.a-blogcms.jp
fee.stir.ae
portal.puget.tech
puget.tech

Certificate

The complete raw certificate details for blog.puget.tech in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 343235964827149935742488827475792748712228
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-26 08:46:37 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-26 08:46:37 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'blog.puget.tech'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 755789466465361482593669629300225441108731259803927672487871725207494858374782989281615996396297079278117644795054229651862592658067147227704133209262941154913946914034314736443957462842933119807114236308064486772644705069944717875318191487122618787219235108960929092777900667678445543560705923377546844791931415594896469806860482099900137721465572428674541890557672195213487215600125186264502092728051768475907960277021292951954338259721252867146711861219363876009926083267056214174004217344930861515894906316028674771238396988086515049039090353048909837959275575739634002877105450914511870684645983158584792589060531041914548271844028704995153595495620141830385102305281282134981090235515030698018457068166608911317776185869053697532540350579565128232610560033115571315753045089267418129717109215310603311619024556557384964580464810850938422576300325826047473186621304795181810758819013389216176738969583197894419699313116032901028139609951275602000794687604152067611789412972143806230200887741702330925515951374102008707591655080613579196269047609746112577631977355901831404777766912903583167477158301512379233146514206748152485140952546207271327609135210001084736281460881244771108135508895874741859502876625764507077021135832119
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8872b149024ba4aae1828064afaeb9af26e855e4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.puget.tech'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000017080e4193e0000040300473045022039796c1ebe471fd371a484dcf8292a19e3ae4bd320aa352985f1a21cc3982f10022100d7894ba5d3e04f82d4ec768d62cba2faec674baf630d414c7bc44e10d4c154840077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000017080e4199a0000040300483046022100892fdfbcba8c2ea79391fcc7a0b6c9a37e4a4cd8afab4c0a07674a4c1a7f58af022100901156351ff71e939fe2160a6f1583012fad76dd1dea329158e5261883c9c591
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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