blog.puget.tech

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:ca:5c:be:76:68:e9:98:89:c9:45:03:3e:b2:2f:70:17:6d was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=blog.puget.tech

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ca:5c:be:76:68:e9:98:89:c9:45:03:3e:b2:2f:70:17:6d
Serial Number (int): 330197173826961999984100472812120742827885
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: a0:38:48:6f:1c:7b:99:a0:5e:25:e5:cf:47:d3:8f:7a:85:f6:5c:f3
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 22:6a:60:8d:13:c8:4c:ae:49:75:7f:c3:aa:5e:24:be:60:f2:a9:99
Fingerprint (sha256): f6:f7:9f:ba:c8:13:4e:df:91:be:ba:76:a4:9d:8f:f2:1f:2e:1c:90:47:a6:1d:d8:4e:95:00:f8:38:aa:df:b3

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate blog.puget.tech

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for blog.puget.tech

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

blog.puget.tech

Other certificates including the domain name puget.tech

(limited to 100 certificates)

Certificate

The complete raw certificate details for blog.puget.tech in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAxbEYCiX8sSTLnUM0M3F1
CVbUL1DGATLehgmnvjAEzagmhDB/47NR9BuZAsOzkTSKBq4GnvyvQjbvodsHBYYn
ubL1ZcXpo1YMDcWZrD4E7mx8r5g0M/7Tv4c9XFmNG3fnoagR73Oao1VFgTyMyg46
THj+nVxg4FINpa8nx1hWW7ysQ5Vd/mywHRDiG/Ta3vbATl0KWrsOMC7+R9ivLjBM
YwRQAdxDneWnUczFeZeePZYYiIZI4rUnPA27LsG9avCGowvzU/2jwzTQoccoQ6Fj
/9iK1JYdiBDStNRDTasGw9RD2a31v3LMtGONbYHWgl8NBo8c+RflcGeORLgeDLds
uCrvcC2Rw9tgs6L4O6pt1ys9TGBwqQpYX+F1sIYgmK9d8ClYXjneTjnHg5L1RNjl
SV3qiFBerTc4ySvEuSIqrvRZWUC6KwGmefFzBYFBs4G5dk+3hSz+d/I+0O+r7NDm
2DjX/62i5whVzMBp0SkT7KSPYaRfNJZ4OA7hCCxRkVm3cKQL6iXGE0fV8MNUXWF8
/JKKSYaMLLO4eRuEPXKKWn3fGmmyI/mU7CBWZPV7LKURnySHqbNu9ipZvh0K37EH
iSUeADBD6m0sXMk8xgROIohVR6h/KIi3WxpAfudp8AVPeiY3+veetn6HZzgE/rwC
0nUrdcJSYBwI0TyiGrZi0AMCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 330197173826961999984100472812120742827885
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-25 23:47:01 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-23 23:47:01 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'blog.puget.tech'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 806512069284388366331970304627677862995155255989178571308508209695662855139912587992017369678304304077466677195321188297971339316258597209653019453393799588597190570412185189148991067152601723089267477299006598601824366499218043526944656776505628657735903492732293513084871236143741168475429037365002116992672423915281676272875534862413899211240881282355098092746200998251346054328730335130865216627889591517544823437856688268702273049411972701425689465305485085779352140571601791167550604475002541621296190599142679350188163912219203470253014870887840828661604616135937197885060645613229842103989888724460316586419245166491386578391410204063982668603618595199383617734406440080237462036996607494609081963803677351693209879663786530972462122957630786357831860714002304781048352634252516315041633493025773530028745812396158027431309202981808910831465479453118408279302704053187101343652769039304288063750293336170002823102687550003046946519768946142477200885471859274254829551833584344352712014530769701402761902823436631049513222433214191505043539210270157390037811935375359331187487390648261461920583112137891598593888878712532649180922809822631304807474338051302398089352988535240905971403131401237291265447973143695128431090126851
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a038486f1c7b99a05e25e5cf47d38f7a85f65cf3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.puget.tech'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016c2bbed1a100000403004830460221008d4d40a0c52edf7d876d24377146288dfa025b005334bae83e652aeb1791d518022100963e2686926337589dee571073861f0f66aea92293310b4fb76d3728f6c4ee5d00760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016c2bbed1a9000004030047304502200ca0457dfb3231ac13742a6545748543f5d8baa763100e641bfee28af652c744022100bb63babcd8100de3964acf2fe3d48841ea55645c27e6031b1106ed856e54c012
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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