cincinnatimattress.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:5f:e4:fa:8c:32:50:e8:26:04:c8:ea:ee:b7:d7:2f:8c:fa was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cincinnatimattress.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:5f:e4:fa:8c:32:50:e8:26:04:c8:ea:ee:b7:d7:2f:8c:fa
Serial Number (int): 381080333485307527229506511753500592934138
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 84:22:75:91:5b:dc:5e:45:3c:76:79:3f:9d:18:dd:74:27:72:eb:9a
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 69:a0:0b:54:9a:96:35:eb:54:53:b2:1b:91:fd:6a:69:a0:13:1b:35
Fingerprint (sha256): 0f:e2:6c:29:aa:50:6c:8e:f9:29:91:cd:f3:56:95:0b:76:3a:5d:66:52:0d:0c:03:32:52:09:d4:ee:1c:d4:ff

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate cincinnatimattress.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cincinnatimattress.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cincinnatimattress.com
www.cincinnatimattress.com

Other certificates including the domain name cincinnatimattress.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for cincinnatimattress.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 381080333485307527229506511753500592934138
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-03 20:45:44 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-02 20:45:44 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cincinnatimattress.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 838851563409306465025604817632220049330203802771428897025669713646490783101739212254694502405324144270587080303781747316193940954076851687310893365229285857777707519873546320967839023327541323713965798012663132908945001002454926659420593973745241271569328817530736455973966557241198059120338495106439292276233807595927070816909590092311063648014622763195034324687384028360318668637964582424089284381147681579322996584725072061107260560355819510087861847817178091474790561698801814736358842453431810376804998082461975492257659129382404745651274111606821017613833441909182645938354993754010475106456679370148831318356094710184274014435480765702062199584201133710021640782616153881269302025561049356096729550632804080643515610346567064870116995810272927208687945934607955781137122967564963884935500841834258881043269426238239164461973098249317512854075197051023132336663333515682332611497612333874208778277704271031241170107733677543675717946525646202879463532472597361454273713806386244451745654855415153612369861168252697645332343856528571360794050530312355043580707247290936312370500153905473033566908685337475242027295400994776006359354499396455566805088771410357686550334638383908850798797038543573045135515854323485546914362525381
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							842275915bdc5e453c76793f9d18dd742772eb9a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cincinnatimattress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cincinnatimattress.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016cf9173bcc00000403004630440220785e55ec3f73e6e8aacf6d587c0fd07ea162a23f0d0e8d7d1fe9dcc98251114102205f686fe93798e5d944e116509936226dcff2526914b9db39e969f5cae7922968007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016cf9173b57000004030047304502206c3d0a25a0c744af07fd0d7b4924eab08840bc342cd674a0fdb6d08720dfa2480221009e0482b5725cbb011352abc88defa92241ab00d8d1eb300e467ea2a37949bc43
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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