mafamilylaw.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:90:ff:5c:bc:a3:b4:79:64:20:eb:77:83:d1:78:c7:6a:45 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=mafamilylaw.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:90:ff:5c:bc:a3:b4:79:64:20:eb:77:83:d1:78:c7:6a:45
Serial Number (int): 397789239219955314107928890571050619202117
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 78:9f:10:46:75:35:39:c2:b4:bf:40:6b:3c:a9:e8:1b:e9:34:91:f7
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 31:f7:d7:88:a7:df:90:01:94:d2:e8:4c:a1:71:1c:8c:41:8f:36:8f
Fingerprint (sha256): 05:83:33:f9:b1:cc:47:92:ee:d6:76:65:37:50:d2:d5:19:e3:3d:a2:e1:88:93:57:84:b8:0b:31:d4:e5:b0:ec

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate mafamilylaw.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mafamilylaw.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mafamilylaw.com

Other certificates including the domain name mafamilylaw.com

(limited to 100 certificates)
mafamilylaw.com
mafamilylaw.com
mafamilylaw.com
mafamilylaw.com
www.mafamilylaw.com
www.mafamilylaw.com
azoresventures.com
mafamilylaw.com
www.mafamilylaw.com

Certificate

The complete raw certificate details for mafamilylaw.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 397789239219955314107928890571050619202117
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-17 07:21:48 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-15 07:21:48 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mafamilylaw.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 697546438033156243579873433362367525540460420778350514508030223646290790085127671015692050034501643908397291560802950910227390740867746434501781867000637969915504663117640253163475169735421748116083540904025464569543760131646974377830401686727420034429411135246848834446494247449389176167855668500243740800106829877646757964404907392059510620284672852496115416007738426776918245564350398606828634939149103853399651283140235162076912920024320746137478181417829772428588707646674208943947283805561708737961302535460102087421300028274649444378026426392331000775070722114100403329238805662464989870834109587620113499856276921053404914371367316832596635684891154772783629654275470515263104972633407417180637306019268383703073189028645049691828190838875814142587715151902272131780088628744151220629456848293719708267254934232552744252547938347681153759043180367188977901943470275623580734759184355422818750160878435004196292804727986391230566195192461332915618783023237453972936164366570006471738746783556687416831477854815578803887905649107842632494214482720389375122054027545833488478330979883060369848306660045712816880916996470244605744599656156912313642866037787399560457775478033688794506943712011759755182804833694006966819427744719
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							789f1046753539c2b4bf406b3ca9e81be93491f7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mafamilylaw.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016dd8cf01d7000004030047304502201968fb561c1fbd0ed49f7fa3073cef8bc082d7a5ce3728cca8f4213a1a16fd4d022100dabb4fd89598318296f845ee5daec400650c038914a59620a98da8e29097e6f9007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016dd8cf01d1000004030048304602210080e00695b9726e5c7125712e3621d8732926c86e71342f14b1d7d2da2f5c088e02210096d79a7b87910560ee95a455895999aa656d904702afe00b6fecef6d187f88f8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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