Issued by Let's Encrypt Authority X3
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
RSA
4096
SHA256 with RSA
Digital Signature
Key Encipherment
Server Authentication
Client Authentication
8 extensions
No
unhandled critical extensions
This is not a CA certificate
-----BEGIN CERTIFICATE----- MIIGDjCCBPagAwIBAgISA5oCtUIi+QZmb2yWirQ6NpCmMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xNjEwMTgxMjM1MDBaFw0x NzAxMTYxMjM1MDBaMBcxFTATBgNVBAMTDHVzaW1ldGFsLm5ldDCCAiIwDQYJKoZI hvcNAQEBBQADggIPADCCAgoCggIBAOaMJ496BykLvnXyUEbHDB07+4gsLfv+f4dI qEPFmMlBGvZ9A1CKR5rukoBqvnhsS7hJW5gOHcExmz6K1JALByxmuZ+aip4F9wit 92T2w5meGehkq+ym4SMUVRJ7sg+Rx+YC+c83nqdIdvE1+koqGN206bdWnWOf74QC Kvbh6E8yxVT2z5K0SWsQF9N822Wxcokeg+PsXqzp9yQAjVLhR1h8OMNGcWhHs+Ww BV4CRT2z+41m0y9GRtHHucn+FcQof96RkUrK7tUresW6l/ek/tZE1q8pizjfcaKm HND1Boc6JRmnLdZwy2fwo6E5GEP2L3tW7XjIoyYJF8wYiBMxX3LrRss6N63fDI2k 1MtvIYhAv0mT/hxKBJDoPeYIgsQF+UBNBgwFCmLpobUrR0+RZaelUSS+WICeDhzL lBSLtMGLR87Hnz/kLV+W3YcfFXhml7WOQbWB2HWGfBGy2Q6EAYsbdrgSgCNpXDx0 5T4h574Q5T/7c3I+FmRcuv9vqQY1G+/2IyYjXUfvQRhQe9YTX46b9epzhZ6Ek9ap x/dbY7PbZPqk5xY6wf+P9l7whW7y4qIxARWBmIJRB+sXpTXAajj4Lfdd6EELN3Xz DD2UIM/WNxXgmPRwKBO9p3KQDK/7Bmfxl02UNNEnYoDuOmi/kp83sf2ANazeqgkH A7ap8DeHAgMBAAGjggIfMIICGzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYI KwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFCGdiLN+ 8so6ZJfzEvWlUNzYNFqGMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyh MHAGCCsGAQUFBwEBBGQwYjAvBggrBgEFBQcwAYYjaHR0cDovL29jc3AuaW50LXgz LmxldHNlbmNyeXB0Lm9yZy8wLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14 My5sZXRzZW5jcnlwdC5vcmcvMCkGA1UdEQQiMCCCDHVzaW1ldGFsLm5ldIIQd3d3 LnVzaW1ldGFsLm5ldDCB/gYDVR0gBIH2MIHzMAgGBmeBDAECATCB5gYLKwYBBAGC 3xMBAQEwgdYwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3Jn MIGrBggrBgEFBQcCAjCBngyBm1RoaXMgQ2VydGlmaWNhdGUgbWF5IG9ubHkgYmUg cmVsaWVkIHVwb24gYnkgUmVseWluZyBQYXJ0aWVzIGFuZCBvbmx5IGluIGFjY29y ZGFuY2Ugd2l0aCB0aGUgQ2VydGlmaWNhdGUgUG9saWN5IGZvdW5kIGF0IGh0dHBz Oi8vbGV0c2VuY3J5cHQub3JnL3JlcG9zaXRvcnkvMA0GCSqGSIb3DQEBCwUAA4IB AQBLJTaGO1RZKq8tZ74OTkh+4Kkwl3pfsdUcbiX5/297dMu7rse15xcziPgsLZ7T CY0wiCGb8Cve6cpO7GHqaJ88x5bhII0+B0c6+f4mVWfjvm7t37AYcy8mqjSToMbS EO5PJ1Bzusbf6x7+c+4WdvMXutQryhiT1otUPcynLpXzlbUtmc01iwE7JsPLXriM VoYIzAWNgwcwdT7E0TcQEWc3uw/8UsTpwQtqOJkJA92MpZAOENzCDDEe+0PWCllL H5BbAx7+Xfqyynec2r0jBvQ6+vU1lVBnrjP6961kd+kH/vPqo7SATYZWGU+/Q3id odj6OmG2+RyDsHUEAAxryNQy -----END CERTIFICATE-----
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA5ownj3oHKQu+dfJQRscM HTv7iCwt+/5/h0ioQ8WYyUEa9n0DUIpHmu6SgGq+eGxLuElbmA4dwTGbPorUkAsH LGa5n5qKngX3CK33ZPbDmZ4Z6GSr7KbhIxRVEnuyD5HH5gL5zzeep0h28TX6SioY 3bTpt1adY5/vhAIq9uHoTzLFVPbPkrRJaxAX03zbZbFyiR6D4+xerOn3JACNUuFH WHw4w0ZxaEez5bAFXgJFPbP7jWbTL0ZG0ce5yf4VxCh/3pGRSsru1St6xbqX96T+ 1kTWrymLON9xoqYc0PUGhzolGact1nDLZ/CjoTkYQ/Yve1bteMijJgkXzBiIEzFf cutGyzo3rd8MjaTUy28hiEC/SZP+HEoEkOg95giCxAX5QE0GDAUKYumhtStHT5Fl p6VRJL5YgJ4OHMuUFIu0wYtHzsefP+QtX5bdhx8VeGaXtY5BtYHYdYZ8EbLZDoQB ixt2uBKAI2lcPHTlPiHnvhDlP/tzcj4WZFy6/2+pBjUb7/YjJiNdR+9BGFB71hNf jpv16nOFnoST1qnH91tjs9tk+qTnFjrB/4/2XvCFbvLiojEBFYGYglEH6xelNcBq OPgt913oQQs3dfMMPZQgz9Y3FeCY9HAoE72ncpAMr/sGZ/GXTZQ00SdigO46aL+S nzex/YA1rN6qCQcDtqnwN4cCAwEAAQ== -----END PUBLIC KEY-----
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 313743941904238088820010422193427888640166 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-10-18 12:35:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-01-16 12:35:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'usimetal.net' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 940551653649641201010144610369189173819815699459372410190108582599092364281500526246273924807284267616959334873113179872774896839102889266484647483710995077907883537232271765466615627071637441983883021276463647454398955905988694420196809188557834610633714739041264613820132270139409479822118202306987491477269627139801885419166382349801998606519112837811099411521060986799107682578476274031169134832904343439436110267295105963802642504906355447667063522142346975892571168133115249883342923679533304904725473098221326779335946915869269184053230002696387961087498411732978548573815895845992587511740585531847780688228326054947752137198643727460648977905420736099755014756665685999401652990273360810422873457090925988998546587806668290425858764554398409770950339851072237521911755247691836543549167713999834679025432477053294912954764925364665220764895275884216669350630047538808276976461100524696938696958575024816844778112712695328211676492514774861963268393884523013054129858854182620021537410553536440728139922320595498015722666997426477687196557815776709803173416034615409297343078758299129215773721817819934017548619916600155046837929243080073879735671762600451893514401661289278086906585638211302196050029698221145166289438783367 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 219d88b37ef2ca3a6497f312f5a550dcd8345a86 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usimetal.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.usimetal.net' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 004b2536863b54592aaf2d67be0e4e487ee0a930977a5fb1d51c6e25f9ff6f7b74cbbbaec7b5e7173388f82c2d9ed3098d3088219bf02bdee9ca4eec61ea689f3cc796e1208d3e07473af9fe265567e3be6eeddfb018732f26aa3493a0c6d210ee4f275073bac6dfeb1efe73ee1676f317bad42bca1893d68b543dcca72e95f395b52d99cd358b013b26c3cb5eb88c568608cc058d830730753ec4d13710116737bb0ffc52c4e9c10b6a38990903dd8ca5900e10dcc20c311efb43d60a594b1f905b031efe5dfab2ca779cdabd2306f43afaf535955067ae33faf7ad6477e907fef3eaa3b4804d8656194fbf43789da1d8fa3a61b6f91c83b07504000c6bc8d432