socialbookmark.samweber.biz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:02:61:f2:97:3b:98:73:bb:5a:0f:47:00:50:0d:f8:0a:8b was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=socialbookmark.samweber.biz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:02:61:f2:97:3b:98:73:bb:5a:0f:47:00:50:0d:f8:0a:8b
Serial Number (int): 262147617247919012507205991566510944422539
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 01:5c:bb:f8:ef:ff:f8:dc:c3:6d:cb:08:a4:45:11:b4:f3:c0:fd:3b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 79:eb:1c:5b:00:27:fc:66:d9:d0:aa:03:e1:3f:df:f4:a6:36:88:99
Fingerprint (sha256): fa:98:2c:7b:80:24:68:21:2d:eb:bb:00:9b:fc:0d:11:00:96:0d:43:7a:19:c1:06:c9:ec:a0:89:62:ce:3e:cf

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate socialbookmark.samweber.biz

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for socialbookmark.samweber.biz

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

socialbookmark.samweber.biz

Other certificates including the domain name samweber.biz

(limited to 100 certificates)
london.samweber.biz
bestbookmark.samweber.biz
natalia.samweber.biz
samweber.biz
lingualservice.samweber.biz
bestbookmark.samweber.biz
lingualservice.samweber.biz
sb2019.samweber.biz
samweber.biz
samweber.biz
pligg.samweber.biz
pligg.samweber.biz
samweber.biz
samweber.biz
pligg.samweber.biz
lingualservice.samweber.biz
socialbookmark.samweber.biz
lingualservice.samweber.biz
socialbookmark.samweber.biz
socialbookmark.samweber.biz
socialbookmark.samweber.biz
sb2019.samweber.biz
samweber.biz
bestbookmark.samweber.biz
pligg.samweber.biz
bestbookmark.samweber.biz
sb2019.samweber.biz
socialbookmark.samweber.biz
bestbookmark.samweber.biz
socialbookmark.samweber.biz
lingualservice.samweber.biz
socialbookmark.samweber.biz
pligg.samweber.biz
lingualservice.samweber.biz
samweber.biz
natalia.samweber.biz
samweber.biz
lingualservice.samweber.biz
pligg.samweber.biz
bestbookmark.samweber.biz
socialbookmark.samweber.biz
samweber.biz
pligg.samweber.biz
socialbookmark.samweber.biz
lingualservice.samweber.biz
samweber.biz
pligg.samweber.biz
pligg.samweber.biz
sb2019.samweber.biz
lingualservice.samweber.biz
lingualservice.samweber.biz
samweber.biz
bestbookmark.samweber.biz
bestbookmark.samweber.biz
sb2019.samweber.biz
samweber.biz
sb2019.samweber.biz
pligg.samweber.biz
samweber.biz
sb2019.samweber.biz
socialbookmark.samweber.biz
pligg.samweber.biz
sb2019.samweber.biz
samweber.biz
lingualservice.samweber.biz
lingualservice.samweber.biz
pligg.samweber.biz
pligg.samweber.biz
samweber.biz
pligg.samweber.biz
bestbookmark.samweber.biz
socialbookmark.samweber.biz
pligg.samweber.biz
samweber.biz
socialbookmark.samweber.biz
samweber.biz
bestbookmark.samweber.biz

Certificate

The complete raw certificate details for socialbookmark.samweber.biz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 262147617247919012507205991566510944422539
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-02 03:14:10 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-30 03:14:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'socialbookmark.samweber.biz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 643143780283634933372284461223774650772916080864794581470884367995096648712412045964829945306197791836951601777570483849441454405588155886664478792011201027903086963769911590695642954647274508467352997664845888195184699351211205457401651325003946703463830266058776246356525852387148057001711099192175560895542432424413188109309400002521650925231805624449631848244160852413320140452437176800051189134642266233704018572766089059042061499472891996058967980104891035496360388086613400939169354167141269322379593152803253946326197574667753010216890327273785986616626232821894443112019350527542439417682315264195211433553277390567544355947531924249128603675483715725027327303239153797582938510654393107227758850009509145666735322580944233172375870150750805870455827664920090804484305835417218632687339018212746433979368328819388401177653844238125137913507609389917169433678123436162174654507712974030439571844755008949080843500131094377424030578885835470067032796056696822978449359377776841532926817723473564525633652908622631664757210388217680889057699059952299498076222802115580982799057994179105717941783101017270694108074841209681887785003213964678635734966284404188514401368251316650699391835874547339171133900600805743157447231545427
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							015cbbf8effff8dcc36dcb08a44511b4f3c0fd3b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'socialbookmark.samweber.biz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016bb0e3d7d6000004030046304402205d371ea56a6f5d8bf5749bee279747da5568f84a5a2c5a672fd321fc8a0a0bd40220346f179ec47aefbf80a09abdcc66b1b81079b908265c7df16537de601449bda500760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016bb0e3d7f90000040300473045022100aaff700ebb80fe6429fdc699295b072b7827feb6655a878d69e2c9952358145b02204033992ba6444f744e671a7635f1b3918580241556e2186099f64c6e9b8896ff
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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