usimetal.net

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:9a:02:b5:42:22:f9:06:66:6f:6c:96:8a:b4:3a:36:90:a6 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=usimetal.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:9a:02:b5:42:22:f9:06:66:6f:6c:96:8a:b4:3a:36:90:a6
Serial Number (int): 313743941904238088820010422193427888640166
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 21:9d:88:b3:7e:f2:ca:3a:64:97:f3:12:f5:a5:50:dc:d8:34:5a:86
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 48:10:0e:5f:34:4e:dd:d7:c7:c5:4e:d1:57:e4:df:d4:1b:0b:ca:4c
Fingerprint (sha256): 00:00:d1:d3:18:70:96:30:a8:5e:56:c1:f3:a0:5c:d5:b8:2a:0c:ec:6c:85:9e:8f:e4:cb:19:01:76:3b:64:47

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org/

Check the revocation status for certificate usimetal.net

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for usimetal.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

usimetal.net
www.usimetal.net

Other certificates including the domain name usimetal.net

(limited to 100 certificates)

Certificate

The complete raw certificate details for usimetal.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA5ownj3oHKQu+dfJQRscM
HTv7iCwt+/5/h0ioQ8WYyUEa9n0DUIpHmu6SgGq+eGxLuElbmA4dwTGbPorUkAsH
LGa5n5qKngX3CK33ZPbDmZ4Z6GSr7KbhIxRVEnuyD5HH5gL5zzeep0h28TX6SioY
3bTpt1adY5/vhAIq9uHoTzLFVPbPkrRJaxAX03zbZbFyiR6D4+xerOn3JACNUuFH
WHw4w0ZxaEez5bAFXgJFPbP7jWbTL0ZG0ce5yf4VxCh/3pGRSsru1St6xbqX96T+
1kTWrymLON9xoqYc0PUGhzolGact1nDLZ/CjoTkYQ/Yve1bteMijJgkXzBiIEzFf
cutGyzo3rd8MjaTUy28hiEC/SZP+HEoEkOg95giCxAX5QE0GDAUKYumhtStHT5Fl
p6VRJL5YgJ4OHMuUFIu0wYtHzsefP+QtX5bdhx8VeGaXtY5BtYHYdYZ8EbLZDoQB
ixt2uBKAI2lcPHTlPiHnvhDlP/tzcj4WZFy6/2+pBjUb7/YjJiNdR+9BGFB71hNf
jpv16nOFnoST1qnH91tjs9tk+qTnFjrB/4/2XvCFbvLiojEBFYGYglEH6xelNcBq
OPgt913oQQs3dfMMPZQgz9Y3FeCY9HAoE72ncpAMr/sGZ/GXTZQ00SdigO46aL+S
nzex/YA1rN6qCQcDtqnwN4cCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 313743941904238088820010422193427888640166
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-10-18 12:35:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-01-16 12:35:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'usimetal.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 940551653649641201010144610369189173819815699459372410190108582599092364281500526246273924807284267616959334873113179872774896839102889266484647483710995077907883537232271765466615627071637441983883021276463647454398955905988694420196809188557834610633714739041264613820132270139409479822118202306987491477269627139801885419166382349801998606519112837811099411521060986799107682578476274031169134832904343439436110267295105963802642504906355447667063522142346975892571168133115249883342923679533304904725473098221326779335946915869269184053230002696387961087498411732978548573815895845992587511740585531847780688228326054947752137198643727460648977905420736099755014756665685999401652990273360810422873457090925988998546587806668290425858764554398409770950339851072237521911755247691836543549167713999834679025432477053294912954764925364665220764895275884216669350630047538808276976461100524696938696958575024816844778112712695328211676492514774861963268393884523013054129858854182620021537410553536440728139922320595498015722666997426477687196557815776709803173416034615409297343078758299129215773721817819934017548619916600155046837929243080073879735671762600451893514401661289278086906585638211302196050029698221145166289438783367
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							219d88b37ef2ca3a6497f312f5a550dcd8345a86
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usimetal.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.usimetal.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		004b2536863b54592aaf2d67be0e4e487ee0a930977a5fb1d51c6e25f9ff6f7b74cbbbaec7b5e7173388f82c2d9ed3098d3088219bf02bdee9ca4eec61ea689f3cc796e1208d3e07473af9fe265567e3be6eeddfb018732f26aa3493a0c6d210ee4f275073bac6dfeb1efe73ee1676f317bad42bca1893d68b543dcca72e95f395b52d99cd358b013b26c3cb5eb88c568608cc058d830730753ec4d13710116737bb0ffc52c4e9c10b6a38990903dd8ca5900e10dcc20c311efb43d60a594b1f905b031efe5dfab2ca779cdabd2306f43afaf535955067ae33faf7ad6477e907fef3eaa3b4804d8656194fbf43789da1d8fa3a61b6f91c83b07504000c6bc8d432