shawnallen.com

Issued by R3

About this certificate

This digital certificate with serial number 04:f6:ee:f6:e9:4c:14:f6:3a:66:cb:4a:1d:e7:3b:d1:77:77 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=shawnallen.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:f6:ee:f6:e9:4c:14:f6:3a:66:cb:4a:1d:e7:3b:d1:77:77
Serial Number (int): 432476244289445123517498299013334452762487
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: a9:47:75:3f:58:c3:b9:cd:fc:d6:a2:f6:23:0a:9b:0a:25:20:40:5e
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 8c:21:22:36:77:37:40:da:74:e1:c8:b7:5e:c9:fe:08:e2:0a:07:69
Fingerprint (sha256): 00:eb:0d:69:3f:1d:96:54:d3:3f:68:03:8f:6b:50:96:d8:7c:86:8e:81:a0:00:4a:4e:fa:15:9f:ce:50:96:fb

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate shawnallen.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for shawnallen.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

shawnallen.com

Other certificates including the domain name shawnallen.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for shawnallen.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 432476244289445123517498299013334452762487
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-22 07:36:43 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-21 07:36:42 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'shawnallen.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 651567956906478455638320646186711269280478462302988621296907453362452196734901312923923113295769557236591153630038017658306085544099547432931377889222223044301830284369531626949717260626218784356880586125617121367677006734558275626017401872873660702463910847330537343022815205429080948416621519809773390581537315364154575653358150053991564466712834881526538706754275517202086720736197600527067261331639534183038246233899855196824300360392993848375362781444769061961058103956750468601088386411044545722153934389632123320068757534385298095908231015693836598910484368730914262778238018612311580727932875121497033552792022180038457220999557028114520458651764734815525537390148714535286157214335083540443424793518933117181601793487654787156949286455950088751884254541061832841368153038931930456645561381311240209749230076384771074012789575528168385911434701794308696039901794379170331539540962560009464599848099881641059863240258589601772554479163374745101717511070151510385159598516645925141078413113431394079805170789453300250305223555130425187393663561438569078685453874266907983200925136300011442468111755992378543792965102845435975320208053021347489171312334100507980863586303833738076539656013111775481438996212999758597126110090649
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a947753f58c3b9cdfcd6a2f6230a9b0a2520405e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shawnallen.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d305094770000040300483046022100c000bc3e4f29b8773136ca5ce73c6d20924b4f7a2f36d5a1b5e3af2e5212c1fc022100b53e14f129251db506643a304e079b7a78cec5d1deb66f34336094a487115bfa0076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018d305094730000040300473045022100c490dcfb86fc5f7bd497562c14680901cd4a537b1b6c38b484a8a9c9361836ac022020e0c3ea9c07285b3788f950e14859386df5d999fb72de4e5ab032061ab0dbbb
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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