rschipstech.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:1c:23:75:ce:da:70:71:03:61:7f:04:cd:c2:e0:d0:26:42 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=rschipstech.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:1c:23:75:ce:da:70:71:03:61:7f:04:cd:c2:e0:d0:26:42
Serial Number (int): 270911898743134854273267285150526455424578
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: bb:06:da:7b:d7:4b:f9:a6:fe:82:93:6e:0a:f5:20:23:1f:e5:90:5c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): c5:83:7a:84:2d:a8:b5:8e:4a:71:51:4d:df:cf:4b:1c:d0:65:dd:f8
Fingerprint (sha256): 12:1b:ee:ca:e2:4e:20:92:39:b7:20:0a:25:12:cc:bf:49:cb:f5:d3:d0:8a:3e:1c:b9:34:5b:ab:27:04:fc:28

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate rschipstech.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for rschipstech.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

rschipstech.com
www.rschipstech.com

Other certificates including the domain name rschipstech.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for rschipstech.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 270911898743134854273267285150526455424578
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-05 01:55:35 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-03 01:55:35 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'rschipstech.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 671036809521791528120519803545499632884587574778550234953851154971024955991240325139400170129561364580058757160258008162819031050421838545580986722914786540854621897575126098130560903422762282057212414371781061510954803015820575208766297728301372763878503316385316154625137039057966902268784878711316427153025806112231343578862133487735500044088506882227732308851207569006044533005415727501648585940253235361782783563610948665127403149274256724419339464140000600470565398179491788491361690900826105443168006620714016893288511250846994459721884212623694283552241590472892977053980403154546734896792669979987682124846079333242978315599838181815285981891930433281290610949901360512590140009651846609517712731527895648514303805928440315798846288185740844672317089078371665436080642264579231453369263924648005493271914046755937620378070961247338012689216520266861516473434924105315826181346166467254031704175298451283259737096678539287864258794379120278226764233525534337370034314074763336446676567504781267824864394499310337202678276685860614009738155436493647841488929176596196560153372045090692827551303223278672942662253153239602823305408603595965035971417155246237050396537571267772561757463143159078717958773831138396252921192073817
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bb06da7bd74bf9a6fe82936e0af520231fe5905c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rschipstech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rschipstech.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016a85eb0f9100000403004730450220257029eeb60874686e8f4064e16298505dd88007a96e69c86873db6dc64513c6022100bfb89bcb785233f1de455192c399018d79dbcff435a109e96c4065ddcaeb365700760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016a85eb0fb40000040300473045022100d727ad4c2439e6a330574a08be09d34005e95753db98decc5b454f46f16c57d8022057f58f91d42f92dddd48e117ea4d5042eddfda9f47bc2de89b930b3c21417cb2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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