tighttobacco.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:18:92:65:96:28:aa:ca:70:4f:b2:f8:6f:67:b7:94:4e:bd was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=tighttobacco.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:18:92:65:96:28:aa:ca:70:4f:b2:f8:6f:67:b7:94:4e:bdSerial Number (int): 269698229356333997031408689452744105545405
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: b8:89:e6:0f:06:cb:dc:41:a5:5c:5a:80:86:4f:c1:9c:84:33:8e:09
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 35:dd:86:4f:04:61:0b:43:11:a9:56:00:49:2c:2e:eb:c7:43:fb:d1
Fingerprint (sha256): fe:9f:84:fa:54:e2:19:23:7c:2b:e8:3d:76:af:26:cf:03:af:3a:1d:4f:01:a3:0c:bb:6e:7f:57:0e:f6:8c:b4
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate tighttobacco.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for tighttobacco.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
tighttobacco.com
Other certificates including the domain name tighttobacco.com
(limited to 100 certificates)
www.epuco.com
439.me
badasshumor.com
skbco.com
www.elcourier.com
www.growlishgrumble.com
domainbizpro.com
gemini7.com
hotelfd.com
coloradospringsstemcelltreatmentcenter.com
www.velocityaviation.com
uvpondfilter.com
www.tighttobacco.com
www.paulharrisphoto.com
illusionista.com
vegetable.organic
southernfoodconnection.com
uhoco.com
saynotoroundup.com
bobmorton.com
sangimignano.co
tighttobacco.com
www.tighttobacco.com
tighttobacco.com
439.me
badasshumor.com
skbco.com
www.elcourier.com
www.growlishgrumble.com
domainbizpro.com
gemini7.com
hotelfd.com
coloradospringsstemcelltreatmentcenter.com
www.velocityaviation.com
uvpondfilter.com
www.tighttobacco.com
www.paulharrisphoto.com
illusionista.com
vegetable.organic
southernfoodconnection.com
uhoco.com
saynotoroundup.com
bobmorton.com
sangimignano.co
tighttobacco.com
www.tighttobacco.com
tighttobacco.com
Certificate
The complete raw certificate details for tighttobacco.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGWjCCBUKgAwIBAgISAxiSZZYoqspwT7L4b2e3lE69MA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAzMTYwODM5NTZaFw0y MDA2MTQwODM5NTZaMBsxGTAXBgNVBAMTEHRpZ2h0dG9iYWNjby5jb20wggIiMA0G CSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDNBET/ds2D5rinyy8fLGmeN7bUuLD6 i3xDMzkhHOylK6aFWDeX4XQW8cuZa6m637OOcseOf7341Ry6emxKfttEJnuTqHF9 o3lIDYHy9MYko7MKJksPob9FYiNrSc4w+NMRx0CfM27VdTnld1+K5jh+TlRu+9iJ qh2K8R/9T6/uZaOGIyc2ErTmAi1VdC+a0BT5Zj5iXkBvV1BgAd+wrnYpg4a2ucuu 26qO1n2CdUozGoDYjrUiyGEN1QK8bpD4GeAbeDGNIG+RohQ1nSk0to4HcCSNr/0U hJlECE1+yjID06T/Xau7HtLYbAavHvMVpA+93jvZfW1Ay5SThLp2TnSgSMpqKcAn noacDWVYxCjd7lw99yECeFaQe66lSBxYsHzENgxx5sEQBag3h/aJMdYK5NBGHRa/ 3oY44YS0ZdMZ1o2mjrdznec+bJsm7SoQM9OQl9ubcrVocAl6XR8NqKouKlt7b5+K L3NzpB8HbTYHcQ4ZlG8uuBklmJEqs14z1ql9dg4YEYhPw737qgcdh7bEv4rTNeXu jJBGDWXRWKSMVuslakp1Eq5eqwHDc1Oo3bY2dge2Zzz4pBucA/kYVTBWDFjWPJn5 fybfuagGRFuYSEFdWLqVfZ01wIw4A6ZVVdpP+twBVBcCyOJrZ9wHyXlp9yM9RvYJ LQ8fCsTUyzp/QQIDAQABo4ICZzCCAmMwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQW MBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBS4 ieYPBsvcQaVcWoCGT8GchDOOCTAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv 86jsoTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmlu dC14My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0Lmlu dC14My5sZXRzZW5jcnlwdC5vcmcvMBsGA1UdEQQUMBKCEHRpZ2h0dG9iYWNjby5j b20wTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEF BQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEGBgorBgEEAdZ5AgQC BIH3BIH0APIAdwAHt1wb5X1o//Gwxh0jFce65ld8V5S3au68YToaadOiHAAAAXDi ts9gAAAEAwBIMEYCIQCwPlOcrJh+a3XQ3j5Qp6e72WEiOrq5c4C0lgVymNed/QIh AKO40kG3EGxK3Di++KmTx/SpNQHo/t6UAkqoElu3pXAuAHcAb1N2rDHwMRnYmQCk URX/dxUcEdkCwQApBo2yCJo32RMAAAFw4rbPyAAABAMASDBGAiEAv8GABbVK04QV 7UxJuQV74SsWqOMyNHJtLVbx2cC49SkCIQC4/TR0GeHfe9xQMeydWw0z2GImpmO/ Em13P29HcXJ7GTANBgkqhkiG9w0BAQsFAAOCAQEAiq3LUF/uATDP4a96c5Pp6eq6 7wlJ9eqUjkzn21e3SpsWGYP+Fsh3X+IvTN0g1+VVDJ7Kf2vQxe2Yrdu5qYaByJDS U+lfGnVxNtEcK6YZ/y97+2AQub4pAEDd2v//XcJMpfXcO9VV0v1FWfY4JvHKID5n hUiZo2+mf7lOcdYqjTfJ5A5rjLWpUKIOKxQeWXvirqyujZr0Zvquskez/SExU53g rWPM9nPvKx8uoaIP1EOTXowx59FdMcZrIK12wTQmwl7cuLuM9lCrIVPtCV6ITOx1 3RKUUq0Vj6+xzTDPyZ/CiZcXyI2kS8F3cmkmGIgyICxpWLqH7HmDdBlllGWEhw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAzQRE/3bNg+a4p8svHyxp nje21Liw+ot8QzM5IRzspSumhVg3l+F0FvHLmWuput+zjnLHjn+9+NUcunpsSn7b RCZ7k6hxfaN5SA2B8vTGJKOzCiZLD6G/RWIja0nOMPjTEcdAnzNu1XU55XdfiuY4 fk5UbvvYiaodivEf/U+v7mWjhiMnNhK05gItVXQvmtAU+WY+Yl5Ab1dQYAHfsK52 KYOGtrnLrtuqjtZ9gnVKMxqA2I61IshhDdUCvG6Q+BngG3gxjSBvkaIUNZ0pNLaO B3Akja/9FISZRAhNfsoyA9Ok/12rux7S2GwGrx7zFaQPvd472X1tQMuUk4S6dk50 oEjKainAJ56GnA1lWMQo3e5cPfchAnhWkHuupUgcWLB8xDYMcebBEAWoN4f2iTHW CuTQRh0Wv96GOOGEtGXTGdaNpo63c53nPmybJu0qEDPTkJfbm3K1aHAJel0fDaiq Lipbe2+fii9zc6QfB202B3EOGZRvLrgZJZiRKrNeM9apfXYOGBGIT8O9+6oHHYe2 xL+K0zXl7oyQRg1l0VikjFbrJWpKdRKuXqsBw3NTqN22NnYHtmc8+KQbnAP5GFUw VgxY1jyZ+X8m37moBkRbmEhBXVi6lX2dNcCMOAOmVVXaT/rcAVQXAsjia2fcB8l5 afcjPUb2CS0PHwrE1Ms6f0ECAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 269698229356333997031408689452744105545405 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-16 08:39:56 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-14 08:39:56 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tighttobacco.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 836395073531921458604308422503248048542947283287129997557394472115290848561900439065442992143912368593440365622740315573774274865320020181333953051301788122074752948947918643899495425337431718998193526919201157345121451252493700942368057964567209413056457243368914874621510283872103912430902118072517389303784232674124256917484010153301803289018021642012371758329172087903004528273433394015774242710087497534835981582840336560889902234411173139920364828165390384553478395099871183316930237278981416770423258963333197419152442054870438183767224235803664964972993882306076057401750273359505566817553975121544442829121365050577072103893078733484635957837391955637532391413572847357648052728103951644058727726411692615463596087706085818845297255433769068580227805456681566591963865544160178661986842785917552494580485466176754405388968845252683712193658488686229129161509339312684692508831576482848080564298929155105295855547868706067658233831171824494067498082430365412119311703431628937392202635402572557305727854407808474649742044069159590798716569283500639198808877688042681835461404560506662928286028157910589487573220330046392532859139507979503089444343714400923704096135230994379808312053631659646251294883577629082812201691676481 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) b889e60f06cbdc41a55c5a80864fc19c84338e09 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tighttobacco.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) 00f200770007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c00000170e2b6cf600000040300483046022100b03e539cac987e6b75d0de3e50a7a7bbd961223abab97380b496057298d79dfd022100a3b8d241b7106c4adc38bef8a993c7f4a93501e8fede94024aa8125bb7a5702e0077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000170e2b6cfc80000040300483046022100bfc18005b54ad38415ed4c49b9057be12b16a8e33234726d2d56f1d9c0b8f529022100b8fd347419e1df7bdc5031ec9d5b0d33d86226a663bf126d773f6f4771727b19 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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