mensola.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:40:df:f2:ae:d2:e5:28:07:fb:17:2b:e5:cc:1a:18:35:d0 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=mensola.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:40:df:f2:ae:d2:e5:28:07:fb:17:2b:e5:cc:1a:18:35:d0
Serial Number (int): 283412607202968708894827731828496515216848
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 64:cf:d2:2f:40:7b:59:a2:24:f5:a1:ba:fa:8e:5a:6a:c6:9f:8a:85
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 05:db:2a:9f:89:e1:80:86:19:ae:05:fc:c5:99:63:a4:cd:55:27:e4
Fingerprint (sha256): 14:ff:61:a0:06:ed:84:8b:22:b7:87:66:e6:d8:80:d3:53:f6:22:0b:8f:b4:6f:df:92:05:d2:9a:6d:05:c2:56

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate mensola.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mensola.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mensola.com

Other certificates including the domain name mensola.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for mensola.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 283412607202968708894827731828496515216848
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-07 03:36:51 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-05 03:36:51 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mensola.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 683765177622769432734848733708589569613528358404229579810058072830914873611493052534919295020310145520157589733211709845374096897624194424071867041651222108808744099091256002649533062301977411151687337427928036034206446500383310826872350829595587872855626492884566331256583868702708636374353713406518711015129120130191115339135256376990017229723406676007510386484682626146986368462581074129414194688594305216766750969663547333110157802194424521278685456180256491806554286014216954339007120561712212529934692637435110284206837922077244168213105218813065121548254743374041692779711802886981528739023366384085090192391987717214872150772383676323280546712825287634950377518611762469044768726900011752681407745001047903577980811676042237239960789202334418139983440752329537348596686624767218393805704588896647940277385570542155634122638816573565763582113659906422080266232687933902579282421058721580902759694285528150709180293241456868000608321727697075916627267031650085042142411585486093019603783276034859784042597350066443831551787014295956311864585763502584251708196387001570286197278570156813081505826129203145379671049811054050375435088368399011832578580293420728116418214114035245306671860904662958042042909299253331038555698502233
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							64cfd22f407b59a224f5a1bafa8e5a6ac69f8a85
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mensola.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb27300000170b3481799000004030048304602210085898fc16bf643424732dcd718ce7f0974173a863f81200c9484117747c58938022100d8b9dff0696c3174ea38d4d2eebdebcbbe34bdd02123da8d2e85444a87d7beb800750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c00000170b34817bf00000403004630440220149570b82186ecf567495767a28db8833b5180d38584c25a5ecda4f84194727702207a846272561996e139b37bb58f2ef299a29810b029574bc3f61a2ae08b6a6392
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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