bidskin.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:d5:8b:58:18:da:17:63:cd:69:de:75:dc:b8:c2:5c:18:58 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=bidskin.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d5:8b:58:18:da:17:63:cd:69:de:75:dc:b8:c2:5c:18:58
Serial Number (int): 334002222067035095753405245387767692400728
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: c4:80:c2:3c:67:61:d5:6a:ca:ec:af:d8:0d:9e:52:7e:2b:b5:78:82
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 58:ce:ca:c1:93:b8:b2:dc:60:b7:69:e3:a0:e8:a0:f9:2e:d4:7e:c2
Fingerprint (sha256): fd:09:ec:e3:74:db:06:13:47:34:a4:fb:f6:90:4d:93:0e:d2:83:65:44:78:75:08:44:5d:8f:dc:e6:67:75:28

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate bidskin.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bidskin.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bidskin.com

Other certificates including the domain name bidskin.com

(limited to 100 certificates)
rivercityadjusters.com
bidskin.com
www.bidskin.com
bidskin.com
bidskin.com
www.bidskin.com
bidskin.com
bidskin.com
saveria.org
www.bidskin.com
www.bidskin.com
www.bidskin.com
www.bidskin.com
thetopseven.com
bidskin.com
corrado.org
tokal.com
www.bidskin.com
bidskin.com

Certificate

The complete raw certificate details for bidskin.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 334002222067035095753405245387767692400728
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-07 03:36:24 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-06 03:36:24 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bidskin.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 887264327603089992302282926251188541649953508511548754474431534540110768079814528981471282926386231618046511261511990542132561078324358272425346389793050659370163806512719481337185386215382550313921641942265081151226355512411553698906624662367496986174975443246308371032105964766647655681945309179776658823791860362684757466257191801961261389611474939208004248204524042915662205463213941993286533708381222035815226903327355189447973296577561555196819765501726591903303619540301502798488312801340349520033594262529050602304266688562046291959509806904706427233113757184083454861323713662088152136532378827151059644154697437749557880039774407962696580076653271183271167475091018413365302946543956493452165601602975799392447234527525867167156444131010502206588936857209121151280739122236739432792948042771449586070626643228635512820023397993798629112125469545551338429131313844735381191696121667702218985574670705724709973613863870294287491054766309682117742956286791958792411219951047844653549390312329144152483260701114460254064306728260535879967344624427116228866232204633742857614602406230228238484560509887427694471963126051171713975103013649031244285642592320705657188544874086976628111369711605235038042029032550165782775322523711
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c480c23c6761d56acaecafd80d9e527e2bb57882
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bidskin.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000017152ecd560000004030046304402205e6200dc26bfc3cf5deb610806d635df68d6ffd59287abb7dd5602f0537805be0220289a72f1dffa6b89e36d146ebb22d911a5d1a7408d076b0305cc4c54c50b8949007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000017152ecd555000004030047304502206434a06ab0dce8ef4aeaf8591b636efdac7e7860a37d9910ac90cd5a22791337022100beaa775b1f9d1ef1aeb8c8d7d9e4221fd94f8844a2d20ee815c98f91dfc71af1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		002e8cae663fe97d128388292f1cffab58bc4da1827d98d2830e172736687c8aac1daa5d808b06efd3c9e3c5255188c69e9f2d92532aad7ff89dae5067c90ec586d4230936df96f4468eab75a46365dd52d6ddcf9bf69bce7dc48dd7717e0f5b84114a4e87980fcf302fb12b37a5edd7043c9528ddcef0ceca9355d8d01344772c2dcbb3c3a667d7704af35903aea56f2690dacb88a989d877d5fbcc09bc538f6f9ded2559e603a1843fbfae4d14a0bcd6e304538e79cca6ded8a63ee26a1299d46bc9cbda6e004eae7f8ba3f9eeacf3f44f9a5f67dcc78a620b379a7579707a6a04fb0dfdc21662144df602a25ea824994ddf3ba1bd294afbfa78b4c1861fd4cb