shop.leeanatankersley.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:37:59:8f:8b:7f:94:d7:20:ae:75:cf:6c:f7:cc:8b:a2:cc was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=shop.leeanatankersley.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:37:59:8f:8b:7f:94:d7:20:ae:75:cf:6c:f7:cc:8b:a2:cc
Serial Number (int): 280171434595370958825129106668465376961228
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 17:59:9e:07:e9:dd:9f:8e:21:80:f7:4a:bb:69:d1:5c:ab:18:f4:cc
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 47:94:c0:d5:20:e0:6c:73:f6:6a:7f:a7:aa:ca:e6:5a:52:a5:9a:98
Fingerprint (sha256): 01:12:fd:e7:6a:29:cc:4c:3c:f6:ba:9d:6b:cc:d5:c3:29:39:a9:3a:71:be:04:1d:b8:3e:aa:ae:1c:41:56:cd

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate shop.leeanatankersley.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for shop.leeanatankersley.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

shop.leeanatankersley.com

Other certificates including the domain name leeanatankersley.com

(limited to 100 certificates)
shop.leeanatankersley.com
5704837555552256-fe2.pantheonsite.io
banking-business-review.com
161511-web1.vilcek.org
5704837555552256-fe2.pantheonsite.io
5736126123868160-fe4.pantheonsite.io
5704837555552256-fe2.pantheonsite.io
5704837555552256-fe2.pantheonsite.io
5704837555552256-fe2.pantheonsite.io
5704837555552256-fe2.pantheonsite.io
5704837555552256-fe2.pantheonsite.io
5736126123868160-fe4.pantheonsite.io
5704837555552256-fe2.pantheonsite.io
5704837555552256-fe2.pantheonsite.io
banking-business-review.com
161511-web1.vilcek.org
161511-web1.vilcek.org
brassunion.com
161511-web1.vilcek.org
5704837555552256-fe2.pantheonsite.io
160.167.tmcapital.com
5704837555552256-fe2.pantheonsite.io
5704837555552256-fe2.pantheonsite.io
afscme57.org
banking-business-review.com
5704837555552256-fe2.pantheonsite.io
161511-web1.vilcek.org
alldata.com
banking-business-review.com
5704837555552256-fe2.pantheonsite.io
5704837555552256-fe2.pantheonsite.io
5704837555552256-fe2.pantheonsite.io
alldata.com
intranet.olivecrest.org
5704837555552256-fe2.pantheonsite.io
banking-business-review.com
banking-business-review.com
161511-web1.vilcek.org
2.www.upenn.edu
alldata.com
5736126123868160-fe4.pantheonsite.io
eduhup.com
alldata.com
5704837555552256-fe2.pantheonsite.io
161511-web1.vilcek.org
leeanatankersley.com
5704837555552256-fe2.pantheonsite.io
5736126123868160-fe4.pantheonsite.io
5736126123868160-fe4.pantheonsite.io
eduhup.com
banking-business-review.com
shop.leeanatankersley.com
banking-business-review.com
leeanatankersley.com
alldata.com
161511-web1.vilcek.org
banking-business-review.com
5704837555552256-fe2.pantheonsite.io
161511-web1.vilcek.org
161511-web1.vilcek.org
alldata.com
161511-web1.vilcek.org
shop.leeanatankersley.com
5736126123868160-fe4.pantheonsite.io
5704837555552256-fe2.pantheonsite.io
5704837555552256-fe2.pantheonsite.io
161511-web1.vilcek.org
leeanatankersley.com
afscme57.org
161511-web1.vilcek.org
hamiltonexhibition.com
5704837555552256-fe2.pantheonsite.io
alldata.com
161511-web1.vilcek.org
160.167.tmcapital.com
5736126123868160-fe4.pantheonsite.io
2.www.upenn.edu
banking-business-review.com
banking-business-review.com
shop.leeanatankersley.com
alldata.com
banking-business-review.com
alldata.com
161511-web1.vilcek.org
afscme57.org
5704837555552256-fe2.pantheonsite.io
alldata.com
5704837555552256-fe2.pantheonsite.io
5704837555552256-fe2.pantheonsite.io
161511-web1.vilcek.org
2.www.upenn.edu
161511-web1.vilcek.org
banking-business-review.com
5704837555552256-fe2.pantheonsite.io
banking-business-review.com
d7store.juilliard.edu
161511-web1.vilcek.org
161511-web1.vilcek.org
2.www.upenn.edu
161511-web1.vilcek.org

Certificate

The complete raw certificate details for shop.leeanatankersley.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjxg8p8jiPq6r59x57mU
RYEOCVVXuMjlDCU95Ao0tJTP+Qxj6k6Z4y/WqMLdJEEDXWSngRKzKR/VWTAo9EWR
1FqHTR7YYQunjszg4vXkjtlhaL9hc8vCjTxL6PdguWVKs3AAgcHVwbTrUlpQ1yKH
w1yTaXU3RrJvTjKLyMSghlc8vfNDUaCpTF5b5w/1PPUoZHzR+E7Vr6qQFKXeHwtQ
ipeCuGdQe0UgXH5+gIHaH/55YqvvI37APg6vcVpZi6GZHg/dSEGBMuK7aDkxO4kP
2qFrf9g5tGxtyApmxikoKWxYfdRTokrUbY++UVIZJmI2vIv/vwjM/IPxdpKHc0dK
KQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 280171434595370958825129106668465376961228
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-05 05:15:42 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-06 05:15:42 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'shop.leeanatankersley.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19975426032335370047058503748798187778848023752438020733658161286238559826062665750397538954099217941940292251387186106136238576574980083171877999506428357217110412494879559500622448152492723007013042393263062807528774768958269334634926137045029898283482983665220977262538188967978073844451344984269104274738854806481026127215908971159777157183587053961895786021758190382759278539205704605157228319802957474326178657433466968976092498019290787397256652773976427151154742237779583460903385264018389186464835608953086633901035429387268235849484915991954839399311200555424541362589673782702201119037041961247391911201321
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							17599e07e9dd9f8e2180f74abb69d15cab18f4cc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.leeanatankersley.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d00000168bc4c4a680000040300473045022035d215e78d37e878281171aa0b15531ad0ee19129466eea28a584bd2ed1bca5e02210084e2e6cc46336a3a5e422b6b4cbea5a715257e12a9310a4ef6bf1644def7b4e6007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc5600000168bc4c4c57000004030046304402206c20be6e4c40bba450512a4573f1effa3f3a8f56ead8953a67b31fad73d6c879022065e1dda96e34d1cd086bcfaa411990a1d000110f8ad1b61b1d6f2c74f69d315c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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