www.banningrealestate.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:8a:87:8f:e8:09:2f:e4:5a:37:0a:45:ae:8c:26:5f:86:d2 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.banningrealestate.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:8a:87:8f:e8:09:2f:e4:5a:37:0a:45:ae:8c:26:5f:86:d2
Serial Number (int): 308476017414498885387402975467033845532370
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 8f:42:5f:b3:86:50:c6:fe:95:db:85:04:8a:3b:c1:33:68:b8:1b:95
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 76:e3:24:0e:f8:9a:da:7a:d7:d0:6b:44:93:29:af:c2:9f:aa:7b:47
Fingerprint (sha256): 0b:11:99:4c:2e:5c:e5:5d:f2:36:e0:13:6a:65:00:a0:5f:e6:e4:9c:49:06:96:bc:e1:03:4f:85:c9:bf:88:4b

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.banningrealestate.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.banningrealestate.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.banningrealestate.com

Other certificates including the domain name banningrealestate.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.banningrealestate.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGajCCBVKgAwIBAgISA4qHj+gJL+RaNwpFrowmX4bSMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAxMDgwMTIwNDhaFw0y
MDA0MDcwMTIwNDhaMCQxIjAgBgNVBAMTGXd3dy5iYW5uaW5ncmVhbGVzdGF0ZS5j
b20wggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCsW9WiiMqMzs4fzf0Q
5WmksiIPsLgDf0ChqgfLCA4tIujWjMuMJtocy0qkbKOZM3Q1OF7SgrXWxSyDSglw
75kv7raLSUhZNMYc2VpsKEA0j4+7qGGJHmOEO2NJX7ChjasXlyYsAI7zeGUJz5U3
i2LPF2VqK1m53OHkrR1T93iAEJ8MrutYOKHEdb46i3N3h3TBM0CjOdlFYSnOfZio
nOQ1aeGO3IcPFHrChzS0mm4zgigTvn9GYZF3UzW4bO3ZoiUFfZPAhg7AmEwSEdaa
KP10Kk/ou4XuNsb4QKKZOb4/RGWsIyN0fv4Mr4M35eq1b1/5eIMUEfdnWrKQwCYP
Pcex9vHmQw3ZGxDpyWMG9/rULUIqjHril3PQfs15RiN08nOdYk9hv9wIsuXuyM4i
HkoCMAQZ9TRKoVD7sTmmoxCw2o6+r7ceCeAZaEdWbi1FzeprHlo0FmrNafYQJANi
TkG9ccKug1N48HGefC6Sy5BwNorWQpJdnkeZRfTqBuPtqxDfRKLg1FiYkFOQ6jWw
xg5b+fgNlJgg0eZ0IR+KcLiaYTKXDtU20lGRbtkcNDW4ATPs7g5FtbVRn20rCezJ
hzZHNbqyf7V9fIZ0joYv6cPJjmwNIOOP2rPNbtUWkIOrwNQj65/JrPjcKMMJoWCj
7R6jxv1g+gc+1J0r+lXTeGIG4wIDAQABo4ICbjCCAmowDgYDVR0PAQH/BAQDAgWg
MB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0G
A1UdDgQWBBSPQl+zhlDG/pXbhQSKO8EzaLgblTAfBgNVHSMEGDAWgBSoSmpjBH3d
uubRObemRWXv86jsoTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6
Ly9vY3NwLmludC14My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6
Ly9jZXJ0LmludC14My5sZXRzZW5jcnlwdC5vcmcvMCQGA1UdEQQdMBuCGXd3dy5i
YW5uaW5ncmVhbGVzdGF0ZS5jb20wTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYB
BAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5v
cmcwggEEBgorBgEEAdZ5AgQCBIH1BIHyAPAAdwBep3P531bA57U2SH3QSeAyepGa
DIShEhKEGHWWgXFFWAAAAW+C9FRyAAAEAwBIMEYCIQDF+8uSRtAu9ni9LXL2c9P+
QIt7jc6WixhT8xaERkEbxQIhALkS6B+bLKvDYLo+1zAOL19ESJjmOZd63sQ7QWQ6
q2vKAHUAB7dcG+V9aP/xsMYdIxXHuuZXfFeUt2ruvGE6GmnTohwAAAFvgvRUmwAA
BAMARjBEAiAPD/nKOjPGjFzZpCSviATnJLAIVQej7H7drJy65c/vigIgY/b9Mwc2
JKNQvvcqfStCQxHGgbmlfcofV3Uv7+EhdjgwDQYJKoZIhvcNAQELBQADggEBAHd8
9TmMyXLRSpJ9+m4zvBm3EDOWcySCM/dgOnN63Q1QepKOKaxRjYRPa0lc8ZeiuI/U
/yAY2fxb9C1j6wOK01ENB7dM9+MlHhUIL447/G+RyL2e9/8qbqwcX6rW65N5pJXg
xA/AD7FXrJqF9EX1nmnddJL6zLnA+JlrLKXhznUmHCbNoUKumXtQ6lPqmM4Kfh0i
TN3LGWTTLkNXufrCsGJkclaDMVH0d1biGOleJ/fZ3vfNT7L15gUvlVJd8F+8/mK6
pqgNFIBlrOBGzgS+heYTOCz4UBIWhsyAodEkg7zMUMVGS7/GDruAb8X3KUpqhdFq
VjByeKratpnv22J6WL8=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEArFvVoojKjM7OH839EOVp
pLIiD7C4A39AoaoHywgOLSLo1ozLjCbaHMtKpGyjmTN0NThe0oK11sUsg0oJcO+Z
L+62i0lIWTTGHNlabChANI+Pu6hhiR5jhDtjSV+woY2rF5cmLACO83hlCc+VN4ti
zxdlaitZudzh5K0dU/d4gBCfDK7rWDihxHW+Ootzd4d0wTNAoznZRWEpzn2YqJzk
NWnhjtyHDxR6woc0tJpuM4IoE75/RmGRd1M1uGzt2aIlBX2TwIYOwJhMEhHWmij9
dCpP6LuF7jbG+ECimTm+P0RlrCMjdH7+DK+DN+XqtW9f+XiDFBH3Z1qykMAmDz3H
sfbx5kMN2RsQ6cljBvf61C1CKox64pdz0H7NeUYjdPJznWJPYb/cCLLl7sjOIh5K
AjAEGfU0SqFQ+7E5pqMQsNqOvq+3HgngGWhHVm4tRc3qax5aNBZqzWn2ECQDYk5B
vXHCroNTePBxnnwuksuQcDaK1kKSXZ5HmUX06gbj7asQ30Si4NRYmJBTkOo1sMYO
W/n4DZSYINHmdCEfinC4mmEylw7VNtJRkW7ZHDQ1uAEz7O4ORbW1UZ9tKwnsyYc2
RzW6sn+1fXyGdI6GL+nDyY5sDSDjj9qzzW7VFpCDq8DUI+ufyaz43CjDCaFgo+0e
o8b9YPoHPtSdK/pV03hiBuMCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 308476017414498885387402975467033845532370
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-08 01:20:48 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-07 01:20:48 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.banningrealestate.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 703162264540772851678155098043493447957506296123125424835967227106171140691979099756527729056919414593698923042585092201898824413262303769479845763266640309657687778554612352124629589702092438664062749086159882661618836073897179776580676938338484849333788231131482688533341330765526751477224585403409961897982093115151458872988755748829713563181789388342128494236275624017556517152252287880098710661152782030486622727505297470074820254843111577434213665292775456968378108181652132252822154519965596874841791121719678417142334992085662610019798135571072058613724735247545177576353806155675867880022417420966637426782919177436679644128896150493202360269978242243449132748467622642537343911822843847825675134256601932466131693856145279024742432082593193600997767818612142996740367232720986801096403047775045541309664935794181852914151293886111966097358321056251933654928152103002335977056519145324740577384347562696102254476606645237485218071945285301172380250478905310941843328375010836981384184632165764988022260906077632885957541972084004416980309231298861247395881151217536008512425582642374240622063464332492378463013300373067012545815269702675650729987899479670114925014787805268675711064491143244493041805455747569803044782737123
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8f425fb38650c6fe95db85048a3bc13368b81b95
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.banningrealestate.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00077005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016f82f454720000040300483046022100c5fbcb9246d02ef678bd2d72f673d3fe408b7b8dce968b1853f3168446411bc5022100b912e81f9b2cabc360ba3ed7300e2f5f444898e639977adec43b41643aab6bca00750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016f82f4549b000004030046304402200f0ff9ca3a33c68c5cd9a424af8804e724b0085507a3ec7eddac9cbae5cfef8a022063f6fd33073624a350bef72a7d2b424311c681b9a57dca1f57752fefe1217638
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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