lexalert.net

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:ec:e3:9d:1c:95:d6:fe:23:a5:a1:85:41:6b:16:a4:bb:ea was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:

  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

lexalert.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

Time since certificate expired

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ec:e3:9d:1c:95:d6:fe:23:a5:a1:85:41:6b:16:a4:bb:ea
Serial Number (int): 341946046914051185332785235937921037810666
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 92:e8:52:a0:0d:6f:f6:dd:a9:e0:3a:02:d3:db:f1:98:9e:15:cc:21
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 43:03:19:28:ad:e3:b2:ef:5c:ed:e1:0c:e2:d1:b2:5e:c7:a5:01:73
Fingerprint (sha256): 00:18:ad:a0:7f:a0:51:dd:7b:0a:01:67:9a:06:2e:0b:40:e1:87:8d:d2:d4:79:cf:1b:c0:cc:92:7f:6f:3d:da

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org/

Check the revocation status for certificate lexalert.net

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lexalert.net


Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lexalert.net
www.lexalert.net

Certificate

The complete raw certificate details for lexalert.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGDjCCBPagAwIBAgISA+zjnRyV1v4jpaGFQWsWpLvqMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xNjExMTcwOTAxMDBaFw0x
NzAyMTUwOTAxMDBaMBcxFTATBgNVBAMTDGxleGFsZXJ0Lm5ldDCCAiIwDQYJKoZI
hvcNAQEBBQADggIPADCCAgoCggIBAMCs82wv4HORyX/dBjAIf/11cKdYBsCofkB1
vChYHZ5xQcKXeYyEELOgffxAKDRMUq053KWVxr7ARLsjs+4M5yRb/MT0uA4eCydh
9XcYDx04TaKsNjjOcXg7mVpubl+KwUm10TgvkQM+6gXh7mZy496sHdEQxhFvMf57
G61JQZ8C7hUILVHDvHoWeLr0cFBspDPGYXMxiG8pSFtvzghyT0RSVG+X0wTLpi03
2OhgCckgKRL517LSCzd9wCByCmufcQOjWRT4t/LgNdNPrLb/E5sOLHQpBWJ5z2fV
jWWLlxtMMbQDgPk7q1TNg6vHTzGIYMtOADK/WOw2KDPtwSwjmWmP3GZJlAtw9Nvi
AL7OuLNYxzxYjUoAylHVA9agdpBYeRzTrlmxnseDrIJVnbOHXrh0x99vlVNbrHNs
hL2YEd91Se8tmOd2Xvd3nZli/3dPMPmNjwCmymRP77wNNL9Lxxx/5hN3u30rX3aM
q/YDy+p68/4KDqWwH+VFMPjQrZqwBb2DNX5AgdxpU2VSs2zadpbj/wpNBeCk1IH7
g2W8dhHDCXsA61HpymValvbAn17LCTGAWi+/Xkgtw7JTNIBmojeeeJFWd+2Kjmu7
Yx5iI/Tqycgc6TGj/NM/mfbz4HdFNsZXz+9rGN04L352VUvdtxCvwh8vqnpQF0eX
vkWA90nTAgMBAAGjggIfMIICGzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYI
KwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFJLoUqAN
b/bdqeA6AtPb8ZieFcwhMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyh
MHAGCCsGAQUFBwEBBGQwYjAvBggrBgEFBQcwAYYjaHR0cDovL29jc3AuaW50LXgz
LmxldHNlbmNyeXB0Lm9yZy8wLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14
My5sZXRzZW5jcnlwdC5vcmcvMCkGA1UdEQQiMCCCDGxleGFsZXJ0Lm5ldIIQd3d3
LmxleGFsZXJ0Lm5ldDCB/gYDVR0gBIH2MIHzMAgGBmeBDAECATCB5gYLKwYBBAGC
3xMBAQEwgdYwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3Jn
MIGrBggrBgEFBQcCAjCBngyBm1RoaXMgQ2VydGlmaWNhdGUgbWF5IG9ubHkgYmUg
cmVsaWVkIHVwb24gYnkgUmVseWluZyBQYXJ0aWVzIGFuZCBvbmx5IGluIGFjY29y
ZGFuY2Ugd2l0aCB0aGUgQ2VydGlmaWNhdGUgUG9saWN5IGZvdW5kIGF0IGh0dHBz
Oi8vbGV0c2VuY3J5cHQub3JnL3JlcG9zaXRvcnkvMA0GCSqGSIb3DQEBCwUAA4IB
AQBuxbcr695LSq3/ch8FwuMe/w7HXy2DuQM9tX7D2lPCZLcI5dPY1k29ixDhTD72
w8nWCvArlCaXwV7SWkAp1LBaLMSw4rrhAL3gnR6Ml9F5lqY6sN3OmmAUZz0Dg1ls
Eq75/dvys7i4n8oNNBs9YSYxYCZ/ywSyJsb9z7crLiUoWcRuJzmuXNYH4fkiJ4G9
PIuL7c3mcxyJUBPiKxtuTB95eCiI6MJeeMW7uedQEwp0n8/R0o8BcK/1nGKlrCJ3
j55rQ8axDhhxaw7Tx3JfiNQu3Uj72i90uI7Ej7Tp+5FqG9k5kimni4YN0OMTX4ye
al2NDa3dnmU4YTN1+pW8zFR/
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 341946046914051185332785235937921037810666
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-11-17 09:01:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-02-15 09:01:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lexalert.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 786047825079514363960965400575717139518650539397963368141220299559162076449290781295967758563792963705957856811460614213394194250366839831861007326986582927706208028303199773218784556689750242725151955560231385990645664902044045695628704556504564881686519366667328323290962458475129099265903794138614616623076674131182406779929019029209754871855134849795217559044328698634866508932204483239779157111462249633542484874881464396256254351216757482054336739450849661994637317105345599684057923144563646489794872140886084228102167333249663701105520142115541844306033211591905582715402198093120632238478568922708674692357711311849646117886981928752369514636014512588416541389565959399965086354884376964236858298875127193516063633725850536419971087071133699295101458246201884879897118865259058183675608705482590800727425774048476571813852086681717254092265050902869893339010674059853712410683002225058915366868486448752714247353865357094896480114952939537751679846991586840111678569287732778141823308150442426652607292858675618625940692494788574809865836920817623460913281284879944920320405097194193507471457279957012198291688751349824378381180867520565513809251136959987671912055367875947754291276213683877395629956994304326422695517833683
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							92e852a00d6ff6dda9e03a02d3dbf1989e15cc21
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lexalert.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lexalert.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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