www.brainwit.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 04:cd:64:88:6d:d7:bf:9a:40:77:80:52:7a:07:c0:49:a6:3c was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.brainwit.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:cd:64:88:6d:d7:bf:9a:40:77:80:52:7a:07:c0:49:a6:3cSerial Number (int): 418340660125660623774822123776641002481212
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: aa:62:aa:70:02:7c:aa:cb:8b:db:e1:83:99:ec:c3:d1:39:8c:09:a8
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 78:9c:3c:5b:70:94:ad:ea:32:7a:0d:b6:ca:70:0e:23:e2:b8:39:58
Fingerprint (sha256): 0d:37:34:40:f0:8e:3b:a7:c2:37:04:2e:a0:27:cb:c7:66:9e:18:24:d5:ff:8c:00:9e:c6:a6:a2:3c:e8:61:03
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate www.brainwit.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.brainwit.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.brainwit.com
Other certificates including the domain name brainwit.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for www.brainwit.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGVjCCBT6gAwIBAgISBM1kiG3Xv5pAd4BSegfASaY8MA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAyMTkwODU0NTBaFw0y MDA1MTkwODU0NTBaMBsxGTAXBgNVBAMTEHd3dy5icmFpbndpdC5jb20wggIiMA0G CSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDILADI6xZKtDCwwW/hLpF/EBkfsEI1 MLaoCZMRhYQvtfdbM8ON5erJG4mWVSLfG0hDr6xMCdA9tAkFZGDM0SeAim3SFFtX vxsIvtTvzKQGB4MFj+pbeop2qeBRxmLhHcoOrUeothAJZPaMNHYh9JRj511CPlOF 60E0E0X6ZO/oY98B+YEF2t6IO2A6Mk3IABCgzY5RtcPmDHKkB64IZrZ9ENDPKS0H sSNt9LijyR4xZDMNucmUZTW6TeVKWYhGvD+Ui6qYPlp8G0VTzw3rULT/WSqIEPYt m40J+ST415j91B7XHZQR/e/YaYP7n77j7pMHPGjq2RpiButPGYL3gVdedCZ/QI0o x3U5Ny9vaJG5OToEM57S64S8fEkyF83xLsRSd8hOu4kurX/vk1PYPzksQJj3xbmj 71YrgIjo+DX8sgArjiPCBzUjLSQA1GMhLG1q2LE/zhDO/xwSSwMLYRPsrhD2uT4B gIcyPZH1TLm5GvNj0Ut9UInxlqdIe+R5td4P2P5cBd2OJmRsps/aLGGXK7bU1/Ti rZK2/HOL2Lg34b58qRf4jLMP/zNZ+HNdVZGWRlc6BtiLdavu/SbgC0sh5Xy5MU0C QstXixiUB10QLByDWCGaagiTKMh905ton55+f5Ggszyso25nFuS7+XHFcsUc9aqk jyqteA3TYEUeswIDAQABo4ICYzCCAl8wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQW MBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBSq YqpwAnyqy4vb4YOZ7MPROYwJqDAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv 86jsoTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmlu dC14My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0Lmlu dC14My5sZXRzZW5jcnlwdC5vcmcvMBsGA1UdEQQUMBKCEHd3dy5icmFpbndpdC5j b20wTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEF BQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggECBgorBgEEAdZ5AgQC BIHzBIHwAO4AdQBep3P531bA57U2SH3QSeAyepGaDIShEhKEGHWWgXFFWAAAAXBc 3x5FAAAEAwBGMEQCIDCeBbIqgprNgqSIiNL2cX6M/VEdNEk9L/0SFHrGzD5rAiBN J+JiWDYS/CJpccJNA8R0/kKM0sE2ecg1u/taESmDFwB1ALIeBcyLos2KIE6HZvkr uYolIGdr2vpw57JJUy3vi5BeAAABcFzfHj8AAAQDAEYwRAIgeIOuQES1iI6oDwUy 7w0NPn+ZkP/A04pWPa28VMOLROkCIGYByycSRkXjwnikcQnPNrkFE6S7EERQ0hrk 2rInii0LMA0GCSqGSIb3DQEBCwUAA4IBAQCLjZ4ENXwFIMMGWQp+DCw5tRLYXAkL WphfGoHkVrsKYufaPZvUh3MSsm96pJqayzbeFmXTqBNUcmRvayomPWISdSUk/xGA D08Hnd+5td6yn7zOzNk1fY0GCOZDrxrKMsV34r845gTquljko54voFili+icPzRy GmxNxqCPOUCbJ4i+PBIP33AeYiss3us3KRBFdVbL9zTTwwWyYdfxFPLMnjmLNfaD XH9lFOVwqc0X54dn3y7Z2iLQGZcufFht1ggpqyJ5aQyXehyAgKwYlBehT9eNdF2m G7QxAO1kaRrwIVyi82Il+8UbqfJ3v1EyFH9tE/+uGvOoofrFtoSf67z1 -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAyCwAyOsWSrQwsMFv4S6R fxAZH7BCNTC2qAmTEYWEL7X3WzPDjeXqyRuJllUi3xtIQ6+sTAnQPbQJBWRgzNEn gIpt0hRbV78bCL7U78ykBgeDBY/qW3qKdqngUcZi4R3KDq1HqLYQCWT2jDR2IfSU Y+ddQj5ThetBNBNF+mTv6GPfAfmBBdreiDtgOjJNyAAQoM2OUbXD5gxypAeuCGa2 fRDQzyktB7EjbfS4o8keMWQzDbnJlGU1uk3lSlmIRrw/lIuqmD5afBtFU88N61C0 /1kqiBD2LZuNCfkk+NeY/dQe1x2UEf3v2GmD+5++4+6TBzxo6tkaYgbrTxmC94FX XnQmf0CNKMd1OTcvb2iRuTk6BDOe0uuEvHxJMhfN8S7EUnfITruJLq1/75NT2D85 LECY98W5o+9WK4CI6Pg1/LIAK44jwgc1Iy0kANRjISxtatixP84Qzv8cEksDC2ET 7K4Q9rk+AYCHMj2R9Uy5uRrzY9FLfVCJ8ZanSHvkebXeD9j+XAXdjiZkbKbP2ixh lyu21Nf04q2Stvxzi9i4N+G+fKkX+IyzD/8zWfhzXVWRlkZXOgbYi3Wr7v0m4AtL IeV8uTFNAkLLV4sYlAddECwcg1ghmmoIkyjIfdObaJ+efn+RoLM8rKNuZxbku/lx xXLFHPWqpI8qrXgN02BFHrMCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 418340660125660623774822123776641002481212 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-19 08:54:50 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-19 08:54:50 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.brainwit.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 816630051284664710162848661081995010608026525002045543814281286753950965308570736872788707255159169235251705169772165590026927366824529930182546880895349576958880193503049314448087145294107200492184782515298574343164802023884925550646399945453974670768611925429735500802741233913196012878934292795068180788215697754074046010298492824937653038550417985130944136756528384828957984434007563351708818597719677244926842023479056778812630627321336912860565561939235089677697974274741505944490100804036979461081840298190937360229093150513471882073030288839634709090144322593692839621857967933261782628224087093869689958267879714275789757684428504263735446356481189175185068665057618782425438609850384080951579087633083974400210629627905042334640829104208279659979635552292039479465241713036799840715949494142673556589612896924970738212337069130827959638410177019254345556363289564021176082472713522027444977791137680461195583149630170731452772400991463344969119003878980372548755509547871752165764817883197781018475841192840407214585061751578708053027613726518697695762787514345602894772784497802998256381863619781186716544811908519955004062073677518872306890668166325904490488533728896385760339623555046895526683116117037744013800313790131 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) aa62aa70027caacb8bdbe18399ecc3d1398c09a8 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brainwit.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes) 00ee0075005ea773f9df56c0e7b536487dd049e0327a919a0c84a112128418759681714558000001705cdf1e4500000403004630440220309e05b22a829acd82a48888d2f6717e8cfd511d34493d2ffd12147ac6cc3e6b02204d27e262583612fc226971c24d03c474fe428cd2c13679c835bbfb5a11298317007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e000001705cdf1e3f000004030046304402207883ae4044b5888ea80f0532ef0d0d3e7f9990ffc0d38a563dadbc54c38b44e902206601cb27124645e3c278a47109cf36b90513a4bb104450d21ae4dab2278a2d0b . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 008b8d9e04357c0520c306590a7e0c2c39b512d85c090b5a985f1a81e456bb0a62e7da3d9bd4877312b26f7aa49a9acb36de1665d3a8135472646f6b2a263d6212752524ff11800f4f079ddfb9b5deb29fbcceccd9357d8d0608e643af1aca32c577e2bf38e604eaba58e4a39e2fa058a58be89c3f34721a6c4dc6a08f39409b2788be3c120fdf701e622b2cdeeb372910457556cbf734d3c305b261d7f114f2cc9e398b35f6835c7f6514e570a9cd17e78767df2ed9da22d019972e7c586dd60829ab2279690c977a1c8080ac189417a14fd78d745da61bb43100ed64691af0215ca2f36225fbc51ba9f277bf5132147f6d13ffae1af3a8a1fac5b6849febbcf5