legacyhedge.com
Issued by R3
About this certificate
This digital certificate with serial number 04:cb:63:e8:7d:af:e6:40:ea:c0:21:ff:4c:cb:09:c8:f9:57 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=legacyhedge.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:cb:63:e8:7d:af:e6:40:ea:c0:21:ff:4c:cb:09:c8:f9:57Serial Number (int): 417659264945682770349532347682052664523095
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: ad:f3:c1:8d:c1:a8:9f:2f:cd:ba:16:25:56:eb:18:e9:38:97:69:35
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): aa:67:3e:6b:c2:2d:5d:07:91:c7:28:91:1b:c1:e5:56:d4:ac:f9:5d
Fingerprint (sha256): 02:4d:2e:16:e2:ad:c3:8b:70:46:f0:a2:9f:16:2d:ed:19:95:66:0e:c5:6d:75:7c:ee:2e:72:87:f0:11:78:76
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate legacyhedge.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for legacyhedge.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
legacyhedge.com
www.legacyhedge.com
www.legacyhedge.com
Other certificates including the domain name legacyhedge.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for legacyhedge.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGAjCCBOqgAwIBAgISBMtj6H2v5kDqwCH/TMsJyPlXMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDAxMTYwODEzNTJaFw0yNDA0MTUwODEzNTFaMBoxGDAWBgNVBAMT D2xlZ2FjeWhlZGdlLmNvbTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIB AInK+GfWXz9Hd79xk7gNGk3vvTvvpN7znjK9fAjdv2IsKj4Xe2pLDx1rNilC7AmG HzZwUhgmpjzLJe7lH3Pz5q5fuHsP1moUoTdBXOsVmQ3vWm2PYKBTAhmV7Tlm++ba kAjeyhZkH6i5Wzztn2C409omJs4HfkyOZRt4WS83mapbTpl8mg6IhzTsm7paDhXN XhtZ+9KfwBH2hECXlNeIJmekKJRev+zaPyv95KbCb0ju+siwS6NAy/if/7qzd84y Zo5cJiOEY8kPTse5PiDBeqjb3iW2XZlBLtEyiUxZ93E1RZSX/av8gKXMgDMG8u1+ b/Tw1RirBc5FhyKFaHAxtWuQtSdhKOmeD6qKbNSDqLkegbSSKkDRfSfEKnrI1uka rx27C3s8HWuWjGMZi3FlGFF5T2PLw1ngAj1aizkeZd/2XzXIHbh9z1FlNaqiTQc3 eRY1iiBa5Mr1EqDcu3EhUXA+YlOnsBUnCYeNCDatNWFDUkLxI39yTT7v9ZWo8jv6 as7Brk3YhTuFYWwOy77+Z8VJW0o6oHzZT3MBtMkVODUlxGTFXCXocs/mwu0hTzQa eqPX+yU72uO2Pm2hOfsvgyAxMOpgdjhi1iM8BWMqyBetX0xNpgB3wxFx/z6+a4f7 e2Yx2mRFx2TcSIcvRsy3Nv8BrpM2ZCpj3MEBiLKYgOynAgMBAAGjggIoMIICJDAO BgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwG A1UdEwEB/wQCMAAwHQYDVR0OBBYEFK3zwY3BqJ8vzboWJVbrGOk4l2k1MB8GA1Ud IwQYMBaAFBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggr BgEFBQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRw Oi8vcjMuaS5sZW5jci5vcmcvMC8GA1UdEQQoMCaCD2xlZ2FjeWhlZGdlLmNvbYIT d3d3LmxlZ2FjeWhlZGdlLmNvbTATBgNVHSAEDDAKMAgGBmeBDAECATCCAQYGCisG AQQB1nkCBAIEgfcEgfQA8gB3AEiw42vapkc0D+VqAvqdMOscUgHLVt0sgdm7v6s5 2IRzAAABjRGMb+EAAAQDAEgwRgIhAIE52YfXuZPwOxOVYXaeUTHe/KqaOyxMCLmZ 1NQJMRxLAiEA5TwEDuJjBCf/R8QwzP19983edZUEMmxytfWj7xuItIoAdwCi4r/W Ht4vLweg1k5tN6fcZUOwxrUuotq3iviabfUX2AAAAY0RjG/mAAAEAwBIMEYCIQDd fZTYGhdCefwQ5urzErfgzYWJIaROzn4gXB1oMLXAFAIhAJb1rLK0BZxH+UimRLou 7q9y9cja/MJKXFTcQ5ntrJSgMA0GCSqGSIb3DQEBCwUAA4IBAQA0uursNVynVRYG 7fS5NGXq6LTOr2pOuuLLz99PxHtsqsbPl+e0iGoictJJvVl9jCCUnKvZahxFkhtB O+asT2fNqyC/c3A8rde7uONwmdLugOof6UJ2dxKazQIDxBFsNxq3VSHBlFa4xneb N3BssP/WB/cgMiNevLoJp7xPpRGKM/idGQGTHuUz+JA9DnEMJXFlSXrBambNFjrd SsT3shbsstvaymyY0E+ulJebci03GsLSWGks/ss9f6iNGN3VgU4zFuI8PsyWmUZN P4jq+Qh9/SZxFX3cGi4tNItAqYMT9m68IiET2KBmo3/XSU2CQdgPnnrR8q/1ppvS A6zvtT6B -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAicr4Z9ZfP0d3v3GTuA0a Te+9O++k3vOeMr18CN2/YiwqPhd7aksPHWs2KULsCYYfNnBSGCamPMsl7uUfc/Pm rl+4ew/WahShN0Fc6xWZDe9abY9goFMCGZXtOWb75tqQCN7KFmQfqLlbPO2fYLjT 2iYmzgd+TI5lG3hZLzeZqltOmXyaDoiHNOybuloOFc1eG1n70p/AEfaEQJeU14gm Z6QolF6/7No/K/3kpsJvSO76yLBLo0DL+J//urN3zjJmjlwmI4RjyQ9Ox7k+IMF6 qNveJbZdmUEu0TKJTFn3cTVFlJf9q/yApcyAMwby7X5v9PDVGKsFzkWHIoVocDG1 a5C1J2Eo6Z4Pqops1IOouR6BtJIqQNF9J8QqesjW6RqvHbsLezwda5aMYxmLcWUY UXlPY8vDWeACPVqLOR5l3/ZfNcgduH3PUWU1qqJNBzd5FjWKIFrkyvUSoNy7cSFR cD5iU6ewFScJh40INq01YUNSQvEjf3JNPu/1lajyO/pqzsGuTdiFO4VhbA7Lvv5n xUlbSjqgfNlPcwG0yRU4NSXEZMVcJehyz+bC7SFPNBp6o9f7JTva47Y+baE5+y+D IDEw6mB2OGLWIzwFYyrIF61fTE2mAHfDEXH/Pr5rh/t7ZjHaZEXHZNxIhy9GzLc2 /wGukzZkKmPcwQGIspiA7KcCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 417659264945682770349532347682052664523095 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-16 08:13:52 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-15 08:13:51 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'legacyhedge.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 562145794822089477682467122306669007848914403665965727876240436337008671893004490141459967829941713527357513758564338666955921110321055461098314964850546686714688625114234756344922216669455978461303865274705444300965333879277084115833831921106906525498466403043480697017384952570091115655867625410468360630594979983376059993082352176457140492058260437981533930549780526322861569120543959292426969830195706364267072475831360917911075589150386279574466619794854103302690628455274947837126775530289722893099664116253335439289980002380870672325068809904433589618653575870449242128736960611665418402238904606289431028860850153897477502935514267827825758405413811757789790827279190718222078105301897393757148266458989636431229096692606499867594902717535445980312926967160732181610579994337544382984387939314792392028336984335208765363962039343142214114410842500971663433560910851592821131458812370003619147379336761792809512860055816285337805020084014347983401071736941583021727050550661762850748965612135080737522414269684477445947435520706761881260523178857880899614316040333146677845192465673934773167574441277082991751857115912592435760910773636029256798484351033903068713822309216751755987810969630690715918797128509090219621473119399 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) adf3c18dc1a89f2fcdba162556eb18e938976935 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacyhedge.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.legacyhedge.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) 00f200770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d118c6fe100000403004830460221008139d987d7b993f03b139561769e5131defcaa9a3b2c4c08b999d4d409311c4b022100e53c040ee2630427ff47c430ccfd7df7cdde759504326c72b5f5a3ef1b88b48a007700a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018d118c6fe60000040300483046022100dd7d94d81a174279fc10e6eaf312b7e0cd858921a44ece7e205c1d6830b5c01402210096f5acb2b4059c47f948a644ba2eeeaf72f5c8dafcc24a5c54dc4399edac94a0 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 0034baeaec355ca7551606edf4b93465eae8b4ceaf6a4ebae2cbcfdf4fc47b6caac6cf97e7b4886a2272d249bd597d8c20949cabd96a1c45921b413be6ac4f67cdab20bf73703cadd7bbb8e37099d2ee80ea1fe9427677129acd0203c4116c371ab75521c19456b8c6779b37706cb0ffd607f72032235ebcba09a7bc4fa5118a33f89d1901931ee533f8903d0e710c257165497ac16a66cd163add4ac4f7b216ecb2dbdaca6c98d04fae94979b722d371ac2d258692cfecb3d7fa88d18ddd5814e3316e23c3ecc9699464d3f88eaf9087dfd2671157ddc1a2e2d348b40a98313f66ebc222113d8a066a37fd7494d8241d80f9e7ad1f2aff5a69bd203acefb53e81