pastryartsmag.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:9e:f7:e3:6a:11:73:d8:dc:b6:25:25:77:2f:59:60:90:d0 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=pastryartsmag.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:9e:f7:e3:6a:11:73:d8:dc:b6:25:25:77:2f:59:60:90:d0
Serial Number (int): 315430971886452928489770463698013185413328
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 22:e3:b2:7f:0f:a8:57:66:df:f0:1b:76:9b:d3:b6:63:14:68:80:08
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 37:b2:c4:44:6f:2a:a9:7c:be:59:59:59:f8:fd:31:32:79:b0:16:f4
Fingerprint (sha256): f4:6c:53:21:60:27:3b:fe:9c:bd:3e:89:3d:07:11:e5:9a:29:3c:c5:11:2d:a4:d6:e7:2f:55:83:2d:9a:7e:7f

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate pastryartsmag.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for pastryartsmag.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

pastryartsmag.com
www.pastryartsmag.com

Other certificates including the domain name pastryartsmag.com

(limited to 100 certificates)
go.pastryartsmag.com
pastryartsmag.com
pastryartsmag.com
support.ehcanadian.ca
survey.delatorro.com
pastryartsmag.com
www.pastryartsmag.com
pastryartsmag.com
shop.pastryartsmag.com
pastryartsmag.com
pastryartsmag.com
survey.pastryartsmag.com
forms.edwardspsychology.com.au
help.xporty.com
survey.vectoroptics.com
www.pastryartsmag.com
www.pastryartsmag.com
www.pastryartsmag.com
pastryartsmag.com
soporte.coinboxagency.com
pastryartsmag.com
soporte.coinboxagency.com
pastryartsmag.com
pastryartsmag.com
www.pastryartsmag.com
pastryartsmag.com
pastryartsmag.com
soporte.coinboxagency.com
pastryartsmag.com
shop.pastryartsmag.com
shawnwenner.com
shawnwenner.com
pastryartsmag.com
soporte.coinboxagency.com
pastryartsmag.com
pastryartsmag.com
www.pastryartsmag.com

Certificate

The complete raw certificate details for pastryartsmag.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 315430971886452928489770463698013185413328
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-27 20:10:32 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-27 20:10:32 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pastryartsmag.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 874539275731690355166125416382482392518484944128294732195189932560499030938753753396313616803678233032180641882755411145790325657146657200360603678694034365184299872456771850050389390414012860453251467381748844000226872255794180533997411412060901757951200755426137230473140079438017459500178660282151663290015767963838395895223921410289376386336488029989657921238465422667966154211979458033170889892289069954333994379425972219830218156657816174052516196139258264850431960829394787117423779925339101737555778355105173895104122464401285965291459900833210517947319994018910669069741832779865446960331618681565146101616776014456164147867601067283753383596835640585596059338000795933693964534791955621479743051378281801685754862313877138098294875035821174796570076296766370704786541123530593341801148617178034451394356010138824706275457072119071710889664044834452224516694194234968961790404589183176883969129127220798643889604950584652623323578151044674206975972782949268512493011727806855202224919105327999121941063612530157416312928506888581778356336535181030120860229024777613129609187264208271168298339500388929136173628329636343923241500474362252898665852835612884416778814120713544774059055178620852266378033570834013495164602931973
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							22e3b27f0fa85766dff01b769bd3b66314688008
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pastryartsmag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pastryartsmag.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe00000167f18127360000040300483046022100ea333f929a43de7d9e4af5ac86846897eec6bd29605e43f6678627c2b92d6a15022100f24cba6e237c8572e48fc29e3221b32971b6819b6b7fd93abbf8bc5c477dc594007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000167f18127360000040300463044022040fd92f63fa3e9e718bc84b6b04b0668a74e6506c4fbaf9cdce9493f64b2116d022027b1176040b3f22f82edcf2f7a4c320b9aa1d88a9e3ce789951e82bcac648061
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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