hadoi.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:a2:62:b6:17:8b:c5:1e:ee:20:67:00:4f:c3:f5:6b:4e:c0 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=hadoi.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:a2:62:b6:17:8b:c5:1e:ee:20:67:00:4f:c3:f5:6b:4e:c0
Serial Number (int): 403706096987417334174436746903243130097344
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 74:4f:8b:96:c4:36:7e:d7:7a:29:49:16:b7:1f:20:35:bb:44:47:2e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 14:42:bc:59:4c:aa:c1:b6:8a:e7:88:d8:b5:13:8a:3f:dd:ee:fa:94
Fingerprint (sha256): ef:ec:fe:2b:16:e8:07:bc:cf:74:66:c2:b4:ec:4e:e0:a0:08:d1:06:af:c7:c0:4e:28:be:cf:e7:43:81:58:87

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate hadoi.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for hadoi.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

hadoi.com
www.hadoi.com

Other certificates including the domain name hadoi.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for hadoi.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 403706096987417334174436746903243130097344
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-15 22:17:26 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-15 22:17:26 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'hadoi.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 766448237469287287183599467132846543615678459814700650363438590666171566818341633089779795361695793681660805222904460774601251481831442051265809771512641390484326577276713574421574016524555760966904134880696817176083294147665091504510591399232459888677722702303305888644044464568055789072910858534092049312533164851030102183014306724823155526787005038364923442782326813243152782149298152924150788062551805372414569875644975132705154615371068243507656421242214676374501879078536137929832700532198219766596640793187012159597509802426135429913145108052376167302916657057479788289208235178709165805155804913421875788426004450657785944212986097177801664361950988297021962331135101563893905468132202284449710505340988782296756237297435612903748572441714458814100293035823332562654284529054408003945655443670746685229756194826919861730445537650903371177634300382219580943914407644582677227446519884930736922326846281264457277781805393604323621331356967889716621226701937207356848773878009533973067497318597084805393363841607184163511663310933937253425360808541960212703913684112295279740299988503928466435373791382691461408401645792364217614116204053282756584574265393690094678922891994085388727314676729847023333783568901955271891398961417
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							744f8b96c4367ed77a294916b71f2035bb44472e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hadoi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hadoi.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e000001704b247b9d0000040300483046022100ffa4514aa2418874319577a9c915689802681790366d09673e3eb4365e8d4538022100e805f4c36afca1de782b35c87da9ce4a85a9fcc847f942dcc45f9d223d68e2850075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d913000001704b247d4f0000040300463044022030e93d33b1638f13e62cc4bba914b5c32d210402dada729fa8cff84927547295022034fca6cd269ee72ad959f6b9962b0f2279f470eaf48ff3db7ba08a3716490150
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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