medallionmilk.com

Issued by R3

About this certificate

This digital certificate with serial number 04:48:c7:eb:83:55:dd:b2:85:aa:5e:7c:c9:32:e8:36:56:76 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=medallionmilk.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:48:c7:eb:83:55:dd:b2:85:aa:5e:7c:c9:32:e8:36:56:76
Serial Number (int): 373215213370070173798324332165724139574902
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 3a:43:cc:0f:62:97:58:e8:d2:2e:0e:e6:dd:9b:aa:7b:b0:9c:ad:62
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 29:fb:63:73:7c:dd:19:87:1f:35:7d:96:7a:47:37:2e:da:2e:3b:b4
Fingerprint (sha256): 17:43:de:1a:a6:e6:16:24:ec:0b:5f:08:87:73:c3:67:15:60:07:d5:95:5b:8c:c6:2e:c4:dd:43:44:5e:79:fd

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate medallionmilk.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for medallionmilk.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

medallionmilk.com

Other certificates including the domain name medallionmilk.com

(limited to 100 certificates)
www.medallionmilk.com
www.medallionmilk.com
medallionmilk.com
www.medallionmilk.com
medallionmilk.com
medallionmilk.com
medallionmilk.com
medallionmilk.com
medallionmilk.com
www.medallionmilk.com
medallionmilk.com
medallionmilk.com
medallionmilk.com
www.medallionmilk.com
www.medallionmilk.com
www.medallionmilk.com
www.medallionmilk.com
www.medallionmilk.com
medallionmilk.com
medallionmilk.com
www.medallionmilk.com
www.medallionmilk.com
medallionmilk.com
www.medallionmilk.com
medallionmilk.com
medallionmilk.com
medallionmilk.com
www.medallionmilk.com
www.medallionmilk.com
www.medallionmilk.com
medallionmilk.com
www.medallionmilk.com
medallionmilk.com
www.medallionmilk.com
www.medallionmilk.com
medallionmilk.com
medallionmilk.com
medallionmilk.com
medallionmilk.com
medallionmilk.com
medallionmilk.com
www.medallionmilk.com
www.medallionmilk.com
www.medallionmilk.com
www.medallionmilk.com
medallionmilk.com
medallionmilk.com
medallionmilk.com
www.medallionmilk.com
medallionmilk.com
medallionmilk.com

Certificate

The complete raw certificate details for medallionmilk.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwpdvRtD/6sdkiGhiY/gn
xDjZ5fbEz/lIiBe7pPc6pOyizXxQM11mA9ypn7Ki5K/TaP/XPgUGFbmeCghZiifs
nQuFtNQXTFU5nOGwW+YtYQNFJTmjLDoF8E1Gs+DLGD0gXzIJUaFkPe0DQ8akJilb
coPj2wjxw1Ruxc31w4un4kex6vHvhPHbffYjMI/TjRa7DAMAl7Z86/10lAOZW45I
8Qo/xu6+GqhJAxVGzhkQ5seZIY4vJgULD4l7Mt78vh6eLW/S6C5L6R7YioEl/Y/p
r2NUJXlJXtukIOELdJ2FPIMc+QUEX0Jpgo1Z7VP9tVjwj8Xu4f2fTNbgyY739rcr
FwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 373215213370070173798324332165724139574902
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-26 09:07:50 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-24 09:07:49 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'medallionmilk.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24564906384507444428027460483846335170100432494980549670640747152685575374864655839475904723330816404931394917577616939451414297395636465859518797332963338439397560815131791402901961434684765292706070499603020882086384413663742418298835340512040165689372990622691678674008987549316770539880006262867318544720082780345696980504959907673915846093537001255464454310673506875344947965777950030285238855268290594937426164467095187833597897005715228094666694075542489684839505635391768413432083050806900087320751482267580438103700311629235363618137652247317852476757063403648151841926211368931639510969227066137609883822871
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3a43cc0f629758e8d22e0ee6dd9baa7bb09cad62
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medallionmilk.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb499000001871d63762400000403004630440220670d14db1786c1272f17434951a267635ba4afa6755d89216484076469ba872202205e3e5b03dd350a8720e226d5c5538d7f616b4a34fd6b7fd32d1b498dc55a66ba007700e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e000001871d6376b20000040300483046022100e2b0358c1dc7cd566bcae8b9465b8736747f004bc84e7c469653af06ce92df5b022100d664872326b69a84cfb39483b378da7e782a10ab463fb96bec883727632ee643
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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