deepstudios.org

Issued by R3

About this certificate

This digital certificate with serial number 03:29:b4:3e:73:f0:ea:70:e9:7b:9d:8a:d0:b5:72:70:1c:16 was issued on by Let's Encrypt.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=deepstudios.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:29:b4:3e:73:f0:ea:70:e9:7b:9d:8a:d0:b5:72:70:1c:16
Serial Number (int): 275528020152250150376252935079839046573078
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 56:5c:61:a5:97:5f:3f:dc:3d:c6:f3:bb:26:c9:bc:e6:86:68:bd:f6
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 8f:8a:b6:ca:06:29:cc:3d:2c:bf:ac:99:e9:bf:40:55:e0:91:ea:4d
Fingerprint (sha256): 03:cb:43:88:a7:82:4c:25:42:3a:3a:c4:43:e0:54:94:4a:12:31:8d:c6:76:44:15:0b:4e:15:44:f1:5e:4b:c0

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate deepstudios.org

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for deepstudios.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

deepstudios.org
webmail.deepstudios.org
www.deepstudios.org

Other certificates including the domain name deepstudios.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for deepstudios.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnAj02XrRys7AlPX0GHzi
ROw3f1uV0BbyKA/fa8X0NXc2WKchaxP7H21ZaPZ8zz1QTKOFI8zvn5SxnaVz+0YH
W3hQc2TISTSxb1+eLNPfugZ9UgnLxe6ER3Pkukf4WtWgg+IYkxYY884X7hbbsMnY
IYA+JfOE0IgB63rd8m6fWFGf41mKagqdsit70Vhl5TtWOZQCxasyi6xmSNybGhDv
j7zDTxHTFTIKyO94Pkjpc3W5VzKiUk2R4GmZIitgf4aYYoMxD0K3aRO/UTs1iUuX
EovUXBrxXuJ+ZrUkL0zqqDp1JWgMzmNKFkgSluhcrL+GbLksHrC38yTQVlx6xlk9
NwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 275528020152250150376252935079839046573078
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-02 22:45:16 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-01 22:45:15 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'deepstudios.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19697592161592515159815800573978475930581393839812058916935305467499437515238302654913291579750534243021434335959150337889013493890519159116809377966570625751732386096185004144942753000158893420090190040230384593781464694550444106343088289698614572525371094999331825890058265841971856928921638775851394147558351693527928196902727528490225885636360632006568336964350634141778060661808633270560767153088889949366802853280673788418127556579936704867738019847732777991601089022201700260564112015173556011072934890549660478760435684011087792549724147745687850408915208911101656417272435809895005133398138522893222267141431
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							565c61a5975f3fdc3dc6f3bb26c9bce68668bdf6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deepstudios.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.deepstudios.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.deepstudios.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018a5849580b000004030047304502207ce83d21f8e5fd09800435d61ee3bb40c8fd8f461c8b111756830d7a368c7c15022100d179e8ed357e83cb79d12b016ccf47de8330d9177ca6e36226d080df7b197e3d007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018a5849580b0000040300473045022100f0755364b7ff3ec0012f998fd9740d9efb710902df0109d96b1f15fea9850a2802203eb8f40d74297b8f346d775118625cc54d0fc5c3604d4b5f9ac1bd600b358d0d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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