www.greatestpleasures.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:7c:58:dc:c8:7c:5d:d3:e6:c4:cb:cc:2f:f7:fe:9f:b2:e0 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.greatestpleasures.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:7c:58:dc:c8:7c:5d:d3:e6:c4:cb:cc:2f:f7:fe:9f:b2:e0
Serial Number (int): 303649989728750310829362686052523912966880
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e5:8d:df:c7:5b:5e:2f:26:a4:7f:95:c5:ca:68:a0:21:d4:9a:97:8b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): c3:4d:2e:64:a9:48:e1:dd:88:dd:e2:60:02:a0:b8:1c:5b:d1:68:19
Fingerprint (sha256): f5:e7:58:4c:39:96:02:76:40:a4:c8:f8:1a:fe:40:38:58:3c:fc:81:5a:ff:96:3b:68:4a:d3:27:56:37:71:88

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.greatestpleasures.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.greatestpleasures.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.greatestpleasures.com

Other certificates including the domain name greatestpleasures.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.greatestpleasures.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 303649989728750310829362686052523912966880
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-23 09:26:01 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-21 09:26:01 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.greatestpleasures.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 833091804145722846264254086441116764459265135091847077141216395565749909236380469435291650674385687945379250845861068560077746715080421119278910688508030214712978655820423210264003330617947744525050005703929888779983275481543512621753997190140690784923871508032660042598613664152569601994586470226564221196138132993832753047135201040330842214980516872404821295676477261653257393840404404649156915282796330933516727831397817267028826119302620763376568077475940782090351673941497726698839800671438607697781581432873592895034372017992268144792317520512776560567043309066010702498561540024036606426463714881605613928238094770195958031003757682984584862580382391047109604507339170608809087332911933799711639603945332169087187996752159282993994668836650991338459153920525523679229557209943253423043134857409557026360543386749460216624882185686314202510024445916909395846550690489674219211289826120136078751098102794642232593883149635610215782396609601416997930593861046647227272201567853155570776180134772252343915698412742027048900399925680289701501362404752456401743770831635946488149984218219100071269277978875790699646487948782220328029072695888263755935763557036804091049616795910193593084571793242225689529885991345535086058881810679
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e58ddfc75b5e2f26a47f95c5ca68a021d49a978b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greatestpleasures.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016b83df0e790000040300483046022100bf09862fc84cb23a44546b10657b0b1d0c953b22486cf242118f4307709f6fe1022100b19cf79c530a6c098299852e38e29f29c492cdc7144b17b440170a61022c398700770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016b83df0e4e00000403004830460221009030e8f1221f4370eb1c921f697ded53062ce1f302a7b96e53f8434f8cff36b6022100ba967086b5089fba46302dac9d0b1b757178619392efcb49d2fc1819c3567d7e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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