briefbuilder.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:c2:81:f3:98:e9:b3:50:2d:f0:67:0b:46:fb:99:0c:6a:3e was issued on by Let's Encrypt.

With 18 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=briefbuilder.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c2:81:f3:98:e9:b3:50:2d:f0:67:0b:46:fb:99:0c:6a:3e
Serial Number (int): 327524372218977596331126916820940228422206
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d1:26:20:f8:0c:de:11:1e:a6:37:1a:2c:3d:11:cc:fa:0c:cf:eb:6b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ee:dc:a3:f2:5f:77:88:2e:6e:7a:5d:6a:72:d1:c8:6e:72:bb:dc:13
Fingerprint (sha256): 0d:0d:5b:64:d0:b8:9c:29:d2:6b:67:77:0b:fa:23:10:ff:b2:95:fc:c4:7d:4b:04:fe:af:a1:8f:ce:fe:3d:55

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate briefbuilder.com

18

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for briefbuilder.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

briefbuilder.be
briefbuilder.co.uk
briefbuilder.com
briefbuilder.de
briefbuilder.dk
briefbuilder.eu
briefbuilder.net
briefbuilder.nl
briefbuilder.se
www.briefbuilder.be
www.briefbuilder.co.uk
www.briefbuilder.com
www.briefbuilder.de
www.briefbuilder.dk
www.briefbuilder.eu
www.briefbuilder.net
www.briefbuilder.nl
www.briefbuilder.se

Other certificates including the domain name briefbuilder.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for briefbuilder.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 327524372218977596331126916820940228422206
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-12 00:07:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-10 00:07:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'briefbuilder.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 718310621980004298645696484631478770110523646711576937697892924024177116084631627510730996220742659958886252149238069179779237045952598793770875541848491388146267799892424236383158962158235940068521306385388808939230250582869369022802736095478744910971800156958220357603500671935981347811503462099876978027513307997675601698890453305059913494498051988941862429566045428030587956271134343330669512028260288533652774480553575658964209303630081624941535780749053249856676816857559930066207609961736674795553597936175559569786228947063122382022656202194477798155751348731975040861723102557843519513987419613001180742287706675462741140542277717210361390587164840044552775250805220645446101710615524057031248311533826168492259120959057516976257550324133577290301210590484361777633648674838713198815715994093604597634257777265011963848680123089183150474852459559437415855150237694234788146451896506435683015551107740341709000867726799489198306373275957945970595445874314843641136925066366071770113275920242004354979626447962631884007934400565643418668382955048615682980854967301777451279551996086929902610557257096237605299304962685778054589324380866535343111688875403640514226262041068187228162318252715359093727151546023780834560974165311
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d12620f80cde111ea6371a2c3d11ccfa0ccfeb6b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (356 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'briefbuilder.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'briefbuilder.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'briefbuilder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'briefbuilder.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'briefbuilder.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'briefbuilder.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'briefbuilder.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'briefbuilder.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'briefbuilder.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.briefbuilder.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.briefbuilder.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.briefbuilder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.briefbuilder.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.briefbuilder.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.briefbuilder.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.briefbuilder.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.briefbuilder.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.briefbuilder.se'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f20077005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016dbd8149390000040300483046022100c068e4aa3262e184ed5cfc2944fbee3b338df8a580acad0e4ed94e4436eabdbb022100858fe30613632b588b87c295608ff9a33d1b67661497fcf503626c2efc567386007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016dbd814926000004030048304602210091b87e377c1b131515598537cdbfb277d10f02e8438610f1a8042f77819bfa87022100c34a43696dabc9e08ae4a638d0ccdd51d8765a0ff4b0e2d1eca492e3b80ce212
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0001344b4c15169b3332ff3ebee6e8f2b859b5fab8a80f730c44ced00a6277932fdfa1d6571ec42d00ff7d351112a7e2b85ba729022c433c69607671450802388da5fa7979e71d3843987ccb3b1f088e42f42104a4cb4b49724dea602cd8ea3b47c747c330c4e718b22e8d0df1532d166b7b69ff20220f1895f055f008d230fddc29809090a71e8c872ef4032a38e66fa52106a694283bb64e58dec16e74893e2976694a3ffe6b027672c22220d0b7c8a48dd7e6af9a78a2ffb5183d9cfc7d6a94483da41f4ee73187d924b91a115b6aade81d3d13ea18c315f9689adce6d084dea39f8b3cfea30a743773150da0926d7f23de0bd7ceb2d0ed1cd6ce8c489a0f95