debournais.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:b0:ad:64:93:5d:6f:e3:02:a4:e7:ad:f4:ed:e5:67:1f:13 was issued on by Let's Encrypt.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=debournais.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b0:ad:64:93:5d:6f:e3:02:a4:e7:ad:f4:ed:e5:67:1f:13
Serial Number (int): 321457033035239611563560891889071231016723
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: c5:75:18:f6:b5:a2:c6:a5:75:51:e2:84:56:40:4b:9a:8e:a7:bd:a5
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 98:1d:0e:00:22:8a:04:9d:c3:6c:57:d7:6b:7a:ca:d8:80:4e:f3:74
Fingerprint (sha256): fd:95:f5:03:e5:37:03:40:b6:5c:5c:17:20:29:28:6e:0a:68:4d:f3:4e:b0:bb:13:45:2f:df:1c:8d:12:2b:fc

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org/

Check the revocation status for certificate debournais.com

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for debournais.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

debournais.com
en.debournais.com
old.debournais.com
www.debournais.com
www.en.debournais.com
www.old.debournais.com

Other certificates including the domain name debournais.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for debournais.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 321457033035239611563560891889071231016723
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-05-10 02:41:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-08-08 02:41:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'debournais.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 793892987766034253531203619780957843432125233317086253117508486335416011447164171489494867691174479516310835627825565109887288637411638210994267394697865470475937033557382953128827668668935687158646549456869276811234861879677911076605908728821331822294027979852416607460923370636961619931147147798236097363456814293378362612898989359051792122673887927363207138239003777719526811314921172577792539668944176329773718560579230027798968262306173045175136151200287539598497557184315854570273759510584632380064297970248770961320648223929562683364468776536442640302709531411626472517431280399987322022346688427177062642707067389641241526589557625553068810390644617424812316334701137985359389506823302847443009670118803077152684442558779138254287438192159234441245304379089301069928625723214574357733652826255466567512220437820600774046588238780044895040605613228280572218825439905059097552196327349910585728328652151613117867133302372269406686928266870982154939935074453981649685083636870387140255816769531794462156025520695061116356590368091601915438961276396951549713548039033233452296655423907025106334461833780506643272744251906453148111269240464420752048527027617822011859266689313764229794612618627170829179802879817824897986850696991
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c57518f6b5a2c6a57551e28456404b9a8ea7bda5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (124 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'debournais.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'en.debournais.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'old.debournais.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.debournais.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.en.debournais.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.old.debournais.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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