www.benchflex.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:53:ed:06:93:75:20:ce:4c:56:b4:39:fa:51:8a:2c:9b:30 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.benchflex.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:53:ed:06:93:75:20:ce:4c:56:b4:39:fa:51:8a:2c:9b:30
Serial Number (int): 377007641361055114995296526732392265456432
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 63:6e:29:b6:b5:a3:6d:2d:2e:15:b5:22:be:7d:01:b6:20:05:e0:b3
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): f2:d8:7d:08:1c:d9:36:1d:74:4c:f0:9a:de:f6:b9:2a:18:ad:56:dc
Fingerprint (sha256): 18:7f:ea:7d:21:99:cb:06:4d:03:f4:f1:5b:0a:e3:2d:e7:e1:9b:08:10:11:5e:e1:a9:ad:02:59:c8:d9:85:8f

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.benchflex.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.benchflex.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.benchflex.com

Other certificates including the domain name benchflex.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.benchflex.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 377007641361055114995296526732392265456432
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-13 07:42:40 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-11 07:42:40 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.benchflex.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 813797622135966270598439578200962651087067877332305950177912844504319028669708371373132694792561865727304946905482401932298767041438765203489844116765688445029976985132831811718629285924850052520077661932198158429001374981387586092970843248826604845467304202946729981447265728363897314775575686752845882152299934268360705327876295733076935265990108698822990037111734710968051103577896563214644708309200304637741628442779946341868222313201523903681497044498923710080791760176555177167262166840995757481436422424008174543808429411116220190430857205773624207804146888185586374385930331415834470336573580316503008827680377506601109846524459537875432013515940473480873964381580639646376707184454915897573363019254949606136128068266695318935117122515455369173784386513560278862509608994486910098674350394933244529282796812859546102073506618858466406716789122026003169148355512212344754540531672669347571559527873974623192891333243583240680041919968333492753422317507438224562974259471428369508014323372764285589287176690580098517100227944573640541921049757570441541909175219750023297169240463435759827369306162087583117373200743558012227129688153572787119492565078804327672048270064185387263760448113065044301312653598636301250184758288419
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							636e29b6b5a36d2d2e15b522be7d01b62005e0b3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.benchflex.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016dc448aeb20000040300483046022100fc7f5bed88c99d57e10d736c0ded91498306424435a743cd6913915b41646efa022100af1dac3ff9e1f253045edb07e1d8dec2b80a0debd5b8b9f330c0ab9946a293d10076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016dc448aedd0000040300473045022100ae1b8aa2bef5f9b0f208b7d9b2b20d0a8fc5716694b757178d53ebd26befb83f02206467c354a9eebd1bacb8d0b519fc57160c03c42bdebd72da147319cfde0445ee
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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