benchflex.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:e1:f1:be:01:9f:8d:c8:86:06:ef:26:4e:08:69:8d:c7:9d was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=benchflex.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:e1:f1:be:01:9f:8d:c8:86:06:ef:26:4e:08:69:8d:c7:9d
Serial Number (int): 338221720868802747809643677873218756921245
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e5:6f:b3:7e:53:39:c2:04:88:c0:1e:0f:7d:40:29:21:8e:eb:47:ae
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): e8:54:65:39:3a:d3:c6:7e:db:6b:40:23:ed:8b:28:4a:87:79:5c:81
Fingerprint (sha256): 10:13:30:79:cd:60:89:2f:13:c7:8f:30:82:60:eb:f7:e6:0c:8f:67:96:ec:8f:40:ba:76:c3:c4:81:ab:5a:be

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate benchflex.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for benchflex.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

benchflex.com

Other certificates including the domain name benchflex.com

(limited to 100 certificates)
benchflex.com
usaforests.com
www.benchflex.com
34941.com
grabmax.com
www.benchflex.com
benchflex.com
www.alltow.com
benchflex.com
benchflex.com
71290.com
www.benchflex.com
benchflex.com
london-tyres.com
www.lincolnyards-tv.com
www.emonterey.com
www.attivando.com
www.immersive.guide

Certificate

The complete raw certificate details for benchflex.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 338221720868802747809643677873218756921245
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-16 00:57:45 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-15 00:57:45 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'benchflex.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 753891577263985213739241377639702018284583415837114546784979790663615330495350708526110303763161947877461876974573596140345565438077278014640605094316366073733141759488277991832463735130498238856902459741778313655885855068520778861579653611906534057819791209736448348165976920043722815491498635408626172681894966662097735218778585429161841076794177340342747966193592126368111521342530907241001290484886711047760089244090559810411313088301659282180508613180158744576587825119102861525741452057123316201252003587016613733109437585233615865856245477452123685043873611471073274560239586609421605425557607569842538400673842779693636163203668991458793618745815543812806875971990540161242785633169133079608165790429634705116360347232607034397131277481812537944744616899094863090735035783424773795380369596783142350576243553696600711230207551623876384688859055229059739673267903305588403237239763743945750109947727284093515214651734559672298635680980326516468767145306283566456886639928082029196902074534350602887298502870490928128175030468876999779939071726301689336493183480590352635964635084556724918533572173197622171583016246760485891358728340369856710415450912343415946495056672060370396945941467415203336293696370208568060926063517917
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e56fb37e5339c20488c01e0f7d4029218eeb47ae
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'benchflex.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016f0c6cf75300000403004730450220790bda4db9db8a5d67342bf099566bf7be09b18bf39295def33b76731c80d322022100f72731a78d490ec453c0699a3c730c4d7632c04deb58e5b04b4eec66854ba7d300760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016f0c6cf77e0000040300473045022100c0cd475ade527f11e16256f23c431694d8fee76d18ef92d39dc0cedc880f551a02200963dd7f5dbb6318a4c552226b398be6305978554956640a2b786ec9c3b4903a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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