qvist-search.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:77:d0:5c:72:75:5a:35:60:7e:13:bc:11:e1:11:c6:93:4e was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=qvist-search.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:77:d0:5c:72:75:5a:35:60:7e:13:bc:11:e1:11:c6:93:4eSerial Number (int): 302107418894798972807803704066155831792462
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 0e:f3:be:01:fc:b6:05:99:1b:08:a1:b9:5d:17:c3:98:da:8e:1e:76
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 1c:53:0c:93:86:20:0d:d8:d4:a1:ec:98:80:9a:2d:ae:72:79:0c:57
Fingerprint (sha256): ef:a2:c5:71:14:3c:a9:73:2b:eb:a6:78:08:45:1c:68:f4:b1:56:58:07:33:60:4e:c3:2b:a1:d0:e2:3a:ef:da
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate qvist-search.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for qvist-search.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
qvist-search.com
www.qvist-search.com
www.qvist-search.com
Other certificates including the domain name qvist-search.com
(limited to 100 certificates)
qvist-search.com
qvist-search.com
*.qvist-search.com
*.qvist-search.com
qvist-search.com
qvist-search.com
qvist-search.com
qvist-search.com
qvist-search.com
qvist-search.com
qvist-search.com
*.qvist-search.com
qvist-search.com
qvist-search.com
qvist-search.com
qvist-search.com
qvist-search.com
qvist-search.com
qvist-search.com
*.qvist-search.com
*.qvist-search.com
qvist-search.com
qvist-search.com
qvist-search.com
qvist-search.com
qvist-search.com
qvist-search.com
qvist-search.com
*.qvist-search.com
qvist-search.com
qvist-search.com
qvist-search.com
qvist-search.com
qvist-search.com
qvist-search.com
Certificate
The complete raw certificate details for qvist-search.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGcDCCBVigAwIBAgISA3fQXHJ1WjVgfhO8EeERxpNOMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAyMTUwNDAyMjNaFw0y MDA1MTUwNDAyMjNaMBsxGTAXBgNVBAMTEHF2aXN0LXNlYXJjaC5jb20wggIiMA0G CSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQC90aFXYz2Vdt4iF+pz7JhDhbDONkYe eH6D+NBS//4lN52v++G2q1o8GJ9O9Fv6mhYoYdRNNFmfmEV99VcdtmxF8kRE04P7 BfyQACdM2kujFCD5XQAte4SsufrAcneyoXXeTip9vYDuFcmqDed6QYFtUl8+6KmQ UFbi0NLMazxjUGYsEAsn8b2gyI2XEI9UecsEF3AUfkUAHzQuE0aEbswcSIWyRsmd esiQugT5UoB7ZXIE+MFI//D/OzKMDSV8Q7FKREBuUwiFhq+qmxO2UD1ntgsip5pq wzcS+BykxxriYQZ9efVYekIri1ZVQCRwKL34oVuNgT/mSZdfSAl5RrodOyYCzkL6 HuMoYEt4unCixl4cX80bK9NCEAe0HUwI7S4mrIemfhfWrQAmKhL1iOUsVMP9D90I PAVnVLOksN/Z/1qI43yK+1EJC312vEjGf1f4Frjw3t8GbOvZ6z0HM+dXejUu5Epa im600FGqO2ij7IWCaeQOwmPTafw0WP3wuBC6hulgdyOfczZQM18CvRb2u2IOLGvR ge4c+CTndmdX34aHqUut/xjSyX1abeBGMxeVPpjYXEO7EZb+xtGHHkTGEKBQyJ0a tUMOK3CDzTc82rURELiZDSSNQDN6kBngMGXTnnaDV3mPHEmPhrxHr/boSVyj9xdG bUcHk+bcs5mvfwIDAQABo4ICfTCCAnkwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQW MBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBQO 874B/LYFmRsIobldF8OY2o4edjAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv 86jsoTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmlu dC14My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0Lmlu dC14My5sZXRzZW5jcnlwdC5vcmcvMDEGA1UdEQQqMCiCEHF2aXN0LXNlYXJjaC5j b22CFHd3dy5xdmlzdC1zZWFyY2guY29tMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcG CysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5 cHQub3JnMIIBBgYKKwYBBAHWeQIEAgSB9wSB9ADyAHcAXqdz+d9WwOe1Nkh90Eng MnqRmgyEoRIShBh1loFxRVgAAAFwRznumgAABAMASDBGAiEAsWk3THOCL3INok+k 6q86/tV7LS+ecZXiev0kZyL1NzYCIQCAqDPNcRxPC0ONQ6gngV8RD1J4wbyMzBjX iRZTn/rPEAB3ALIeBcyLos2KIE6HZvkruYolIGdr2vpw57JJUy3vi5BeAAABcEc5 7ooAAAQDAEgwRgIhAKygip9nwdvDisVZ+1b3mHrEpILLBD7CbO564vmGTCcLAiEA 60T68lLqUifzcxlLtC/w+SYVby3AHQbbJSuThcY7qacwDQYJKoZIhvcNAQELBQAD ggEBAGdrcB6bE98dhodq25Q+xwD47+qgOjKtb4Ay8LA65bz6/EknPscUaOFO6Fl6 YUlvA8ElbRKvTxqqaT+BcYqAZO8/VG7qARrqgZOQQYvXkpVBE/+w/Kl5+ycessnb rIkeHGzbjICfyZ4E1hkticPoBhMw8Q46relSY4XARR4jIMamXE2ifOablfsTjiBs nZLICwHL+ynCiJk6VNIYEB5KIB+4akp53HD2MDoG/Ey0hGdtoL6xiMX8sXumiWQ7 URRlp56UhVNAYTgSV/el/ihE2GKLw0suSlNBUsEtnMmEmxWH229Di0i/0v2ybCoT lRwP1B3/MzkUjMcQTxz4uqLFH7g= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAvdGhV2M9lXbeIhfqc+yY Q4WwzjZGHnh+g/jQUv/+JTedr/vhtqtaPBifTvRb+poWKGHUTTRZn5hFffVXHbZs RfJERNOD+wX8kAAnTNpLoxQg+V0ALXuErLn6wHJ3sqF13k4qfb2A7hXJqg3nekGB bVJfPuipkFBW4tDSzGs8Y1BmLBALJ/G9oMiNlxCPVHnLBBdwFH5FAB80LhNGhG7M HEiFskbJnXrIkLoE+VKAe2VyBPjBSP/w/zsyjA0lfEOxSkRAblMIhYavqpsTtlA9 Z7YLIqeaasM3EvgcpMca4mEGfXn1WHpCK4tWVUAkcCi9+KFbjYE/5kmXX0gJeUa6 HTsmAs5C+h7jKGBLeLpwosZeHF/NGyvTQhAHtB1MCO0uJqyHpn4X1q0AJioS9Yjl LFTD/Q/dCDwFZ1SzpLDf2f9aiON8ivtRCQt9drxIxn9X+Ba48N7fBmzr2es9BzPn V3o1LuRKWoputNBRqjtoo+yFgmnkDsJj02n8NFj98LgQuobpYHcjn3M2UDNfAr0W 9rtiDixr0YHuHPgk53ZnV9+Gh6lLrf8Y0sl9Wm3gRjMXlT6Y2FxDuxGW/sbRhx5E xhCgUMidGrVDDitwg803PNq1ERC4mQ0kjUAzepAZ4DBl0552g1d5jxxJj4a8R6/2 6Elco/cXRm1HB5Pm3LOZr38CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 302107418894798972807803704066155831792462 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-15 04:02:23 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-15 04:02:23 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'qvist-search.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 774393419339349017645521487766862921200602223489863813692465261779747565254008650468102383996699466530810702555072991572632289494677722381467433534924940974512035703485646339115368365290683168609897029343148165876077281130504743918006131929675623911541218926512669562891217292808561978432442278474853965456002606355380300254375987657217979594035597876265399414538984556529673721679890567391325980157364091409852596845896201975321282777177519946973113906686979483556730659951158902983056566621498495371942993252445053626354503247978848922062660780824631106472283196770984560376973622270511594222152606706060036832129007074746757230830391483337176583884352177021678210791128280150024661860142867353355265523722841127410263577752339224889056126020814129242938416939583229723944108327844341401746723178757504860871557321599725241297831273736075059613740907028836648117322544172157140240213952472428889774824678802821158830022494279511051352890321951921572066835904017326230242591362428444716498086061958597818690382443307556811836251948078925184972658528152597367002944280417987044215659557714519464267365698736757911925193217034588841748983630349272815429601568570382530733608761838936746708099139266270637634388340278305003896005308287 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 0ef3be01fcb605991b08a1b95d17c398da8e1e76 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qvist-search.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qvist-search.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) 00f20077005ea773f9df56c0e7b536487dd049e0327a919a0c84a112128418759681714558000001704739ee9a0000040300483046022100b169374c73822f720da24fa4eaaf3afed57b2d2f9e7195e27afd246722f5373602210080a833cd711c4f0b438d43a827815f110f5278c1bc8ccc18d78916539ffacf10007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e000001704739ee8a0000040300483046022100aca08a9f67c1dbc38ac559fb56f7987ac4a482cb043ec26cee7ae2f9864c270b022100eb44faf252ea5227f373194bb42ff0f926156f2dc01d06db252b9385c63ba9a7 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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