holdmypodcast.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:42:bb:a0:aa:1a:05:14:66:d0:33:fb:72:c5:aa:e0:31:0a was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=holdmypodcast.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:42:bb:a0:aa:1a:05:14:66:d0:33:fb:72:c5:aa:e0:31:0a
Serial Number (int): 284044893864842960304350392997915555541258
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: c6:db:75:27:38:3e:9a:2b:72:b9:25:4d:31:44:c3:0c:db:cb:a3:ed
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): c1:6a:9f:b0:68:b9:1e:ba:62:c6:5c:6c:4d:cc:a1:85:06:0a:1f:c9
Fingerprint (sha256): fa:79:4e:08:7d:8a:a1:f9:51:b3:5b:6b:60:8f:da:bd:3a:a0:28:65:c4:b3:9f:4a:94:b8:33:9a:e6:f8:0a:2e

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate holdmypodcast.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for holdmypodcast.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

holdmypodcast.com

Other certificates including the domain name holdmypodcast.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for holdmypodcast.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAosaUgjvCvVsm3DXmgnTh
XPQP4vOzytwvk7iaBDnpPY+YqStZAWx3Om5rQ8DycQ4BMEVnSeWQSuxN9bGBvX26
6HZrE7AHvduBV/DHDAR42+0vZBfBvQiQwEHhfodoPrIvQXdID2vo0kQymSB4V51S
KfDzvxgVX5YaYtf7CAePGiFjZs11wGnm9iNXGEEYfte8cSZLJTTFy5xLFyUuM/+8
T/HmQThxk5bBYAD+0Yc8IyS4v2GV8jkBIm5Zovh4DDRKIQz9qrNT13BqCTqnUyhT
JIXDGIy2JfvQIBVWz7Oi690nvkmBBNtEyE1XVijLKfQJZ7VDimsbjLh74UuCFQ+3
JP432BwYqLpXJcy2RG0oXgGmdGVOf3lK4JnX1pZn2sVc/3q05DLIgQcHKtL+EszH
Q//L2vl/P7fLfhxUqZ8u387yEOg1/6wNK+z+kEL0/sQqP4lbG/qBv1qTnVAl5Rr4
YVMk1NlHNBGD7WbLH93Quk98eaZ6arhhvQA5I+xr6CfKtcO5JOFjz6LtY00b0RRS
zL7gjYLYQCHfr5lFOTSS0Y73laF4uF6EgjqbbfIkhW2Dt0lUXHs9Dm/JHGkoetHV
dUyh/FvmsXguDbuTQOKST0yQk0q5RjqP7WCC603xQgdG8JqTUO4h1u/rcFAa8FL+
Cu2A/Z304Ib98sMigIlQ5F0CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 284044893864842960304350392997915555541258
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-27 08:29:38 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-26 08:29:38 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'holdmypodcast.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 664066933459816200385482724949441293219573071370147269653238264095729717802348042178568560712410349434516964375508277790037524572153697062559539080532005496401918671385571806805345312841646071240576118646710244446249972425677291740868015600233175448471075576632055479461939172107966486784344148894028037221470770853212390761210685910155694392116477001919110176225048139480234214448456319111832886702408790961702555913421767448955356532572446343269132391116273903625431596893172748808854362926321407923051728387155363194518289880330933603451118983402114414084440359324521610429507175009199466923240815675416203076936756405854439438348367224562217171168267079507317007457972579580522976810508519891321312010359141207884155718585156707228829382617093102882556853077383147023163888155602641988121699609459889622254973810113077140932381876248671748947443736561271830614828360018797378511897985561648666449273779854139092560690700353743329485845529352853870157561460430954242662641674103679739008723210377017659190220533540400092628795461421754230085366376763776243980789959850161462324895457961606144812968308206367292106257511261195000874658497459655233547767404960946093056133175938536116747563321042411703481878682428709203828009919581
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c6db7527383e9a2b72b9254d3144c30cdbcba3ed
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holdmypodcast.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016fe655c5ae000004030047304502201c1fd09aeff1b834d5a424b9b403d30245c1a2f8f97e98bb7d6cd10f10ad3692022100e3eb81c0e634f838db01445d98835a04d5b9c242aac25a1b6fa0a22935f1479d00770007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016fe655c5c400000403004830460221008d4f26b8b61450e2593b638ae1c8131f7fd79aafbfb2365e9594efce5dfc7b20022100df9c86bae883dea0d10babc206996434b89a8bdd94eaa202bbd69089396ec8ba
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		008780cd336ee1b127e5f3704660cacb979059dc245711229d575731e89bad136d900c0d2c87eff088e644513840e655d44143bf291f87ec4efa4b4fa9636ef4c4fd165d01bc36a06e981aed17f32df6fa3ac288074c89b391f112204b7e9f89cc72349bb8c4a564739dbe105939b30c96da4f9d55289c8d6e1eaec5e05f602a93fd1cb104f9b22c49c0d4a1d447723b6247ff8aa03bacba868a10fcf2268f02d3ee3a83667c6d91ccb9d0201f3f105881ff6451c62ba217da5465d6586106846236fae5b36c198ac89533d5a7e88abb471f5971811d176873889575469c05f4a07e70c8c09c43f37005646a7c2ff26eb0726bfe4a4e0c15daf84c317e7af4a9c9