www.legacyplan.academy

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:87:3c:44:2b:ef:33:ec:49:74:ad:d0:40:3f:16:fa:79:e0 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.legacyplan.academy

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:87:3c:44:2b:ef:33:ec:49:74:ad:d0:40:3f:16:fa:79:e0
Serial Number (int): 307355084976636121014890661717070745074144
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b4:5a:d5:31:e4:cd:a6:91:c2:22:a4:6c:76:a8:22:30:b4:27:19:2f
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 2c:38:0f:10:88:98:b8:51:7e:12:54:5f:31:6f:65:60:7c:7b:4d:3b
Fingerprint (sha256): 1a:22:5b:ee:61:82:f1:26:8a:13:2a:80:72:b9:e7:4b:29:92:1e:4c:7c:e2:c3:7e:fd:8b:71:3a:ff:d2:d2:82

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.legacyplan.academy

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.legacyplan.academy

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.legacyplan.academy

Other certificates including the domain name legacyplan.academy

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.legacyplan.academy in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 307355084976636121014890661717070745074144
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-22 08:38:34 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-22 08:38:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.legacyplan.academy'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 910683927728939283236066491556066251608604362512779840282530167833237726082387034155548467495435678160630853101726307017156577756686447786984191501537847063050565738105588169423931889725340966619636973423382552666561953911809492781790800980162366533004471114455131433145943340436175330252223659799579696991302308499566746285924724309295244216769908983219731448993101584204819561996318956411165136793744671924522131519191387904219923315021363136416847068311303960133484131155952261220239529347828852255239301095763145455227750286446706647653033449346013788162181311703731679099357930534446720822663735135101006656055747882682957641538496969827962317156937099554563163900206686237077602916873438349015109719621532092157332432016688632699076373184289035699954829251859801595916588042206714859973449098229145732466794332245529308166653135716423576507019036156963609103700178970116754204343034945469733524341990416614667185360203350163376202265905380495463433055312900401394297500957113417924858451312423759608403240321018560546995610803386054047823508826103821057322339661549370938741151968881110775774640975813349564735528243607421600910149410621077049843136890060096003018280106828762217882973546870253048040858670846982794702862408261
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b45ad531e4cda691c222a46c76a82230b427192f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.legacyplan.academy'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076005ea773f9df56c0e7b536487dd049e0327a919a0c84a112128418759681714558000001706c434b730000040300473045022100b869bdfa86c7f807aae9c1f7dc6a0decb7ad95fa7df6b3978296762ee9efe4bc02202443ae5c4de676f27ed9f19912071d9d1ed3a0787e6145640b604c714c9f989b00750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c000001706c434b9f0000040300463044022009bb72988f5f696b58543a4116eab660518f5e4167fd0ab444e78557379eb6000220200a3c13c9bef0b138b4ca218cd9f8b353f0f3756db702bdd8758e8473fd1b75
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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