leafexpressionsystems.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:e0:cc:ae:c5:f6:2f:21:84:ce:a1:f5:b9:9a:36:40:74:30 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=leafexpressionsystems.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:e0:cc:ae:c5:f6:2f:21:84:ce:a1:f5:b9:9a:36:40:74:30
Serial Number (int): 424944463903264116515437077544177070273584
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: b6:37:3d:d3:e8:ae:32:bd:cd:68:03:97:8f:cb:3b:c7:f1:07:a9:10
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 65:51:a9:2b:5f:21:de:1f:07:e9:90:15:ad:f6:42:c2:8e:7f:96:25
Fingerprint (sha256): 12:dd:1f:46:b0:95:3a:89:ce:67:a6:b3:02:0a:86:11:e4:3f:5c:40:f8:92:8b:da:0b:ba:2e:09:cf:09:f7:2b

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate leafexpressionsystems.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for leafexpressionsystems.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

leafexpressionsystems.com
www.leafexpressionsystems.com

Other certificates including the domain name leafexpressionsystems.com

(limited to 100 certificates)
leaf-live.kissdigital.co.uk
leafexpressionsystems.net
leafexpressionsystems.com
leafexpressionsystems.com
www.leaf-live.kissdigital.co.uk
leafexpressionsystems.com
leaf-live.kissdigital.co.uk
dev.leafexpressionsystems.com
dev.leafexpressionsystems.com
sni.cloudflaressl.com
leafexpressionsystems.com
dev.leafexpressionsystems.com
leafexpressionsystems.com
www.leafexpressionsystems.com
dev.leafexpressionsystems.com
dev.leafexpressionsystems.com
leaf-live.kissdigital.co.uk
leafexpressionsystems.co.uk
leafexpressionsystems.com
leafexpressionsystems.com
dev.leafexpressionsystems.com
leaf-live.kissdigital.co.uk
leafexpressionsystems.com

Certificate

The complete raw certificate details for leafexpressionsystems.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 424944463903264116515437077544177070273584
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-29 10:15:10 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-27 10:15:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'leafexpressionsystems.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 824456310794662346125706090035431710017906238424151670968083593688550971841635149195727089999869229106056214704931039044723697662677170808304875720630396261554963714171141429441411064973740403779117442177650549631352257988511795634498187264276516911342111663769395554464421109070931701394465227825492740105091390653872470660357773819752043662228041387872576846837404405699362628624493726306370972393263783136678350131216350976623367318921787919450337835137607830995384941225039679462583878233960771706910935144376970114068237088024709059875682182745199302362133348275708708552195516048564997600355718393001584623974748052126610097735710365489848577641178888066821845353194310185654851056784129098138534294187855015701516007862100658681482593589532177683863472411117494554092373636010300922879547317160581957126641378697789471547425717941708680886012081906762163890405129971433390056742280926370574907222883517457751892763534604229109598853779330115661192156121257464986102497466052144894203535086975312426782711194485485510804365403286974817879658184594223250033785240322298766422287210238320221111562306249585435909456022554502718934339423784869203621745720808791846484155065295882477374470923037596294108430214889422784331731451013
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b6373dd3e8ae32bdcd6803978fcb3bc7f107a910
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leafexpressionsystems.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leafexpressionsystems.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016b034d0e64000004030047304502200f6e5c2cd614825a085e3610513c8a65c8654f735696bd158676a17d37622420022100ffce5e5fff190163c98ea58d3f416040ea8b53c9680209c56c8929f439f9118700770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016b034d0e420000040300483046022100a7656e79309e5003ecec91f04c3466dff5b794b727d221b2b164de352eb93299022100a96694b557087f2aa17e1bef9cd46974b8b83344170b42d2cadc5ee92e47185c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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