banningrealestate.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:09:4d:78:15:65:ea:45:d4:3e:72:88:16:b9:d6:20:d9:7c was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=banningrealestate.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:09:4d:78:15:65:ea:45:d4:3e:72:88:16:b9:d6:20:d9:7c
Serial Number (int): 264502373162872798813670257305259213904252
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 8e:cb:fa:16:66:87:1d:60:1c:97:3b:17:d1:cf:b5:27:0a:91:6a:27
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 1d:10:b0:ff:96:5c:1d:35:57:da:33:95:41:51:6c:da:a4:bf:87:ec
Fingerprint (sha256): 25:79:29:fc:bd:49:6a:64:49:e0:23:5b:47:0c:11:5b:7c:9f:80:00:f2:35:f6:17:90:52:d2:14:38:47:68:be

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate banningrealestate.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for banningrealestate.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

banningrealestate.com

Other certificates including the domain name banningrealestate.com

(limited to 100 certificates)
www.banningrealestate.com
banningrealestate.com
banningrealestate.com
www.banningrealestate.com
banningrealestate.com
banningrealestate.com
www.banningrealestate.com
www.banningrealestate.com
mappadigitale.com
mcfarlandrealestate.com
ogilvy.org
banningrealestate.com

Certificate

The complete raw certificate details for banningrealestate.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 264502373162872798813670257305259213904252
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-17 17:38:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-15 17:38:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'banningrealestate.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 824971743809355721478556294256148721519784128807184319773566287537633533690757564009581303594848492677998616103415786938968233166173674106704421010326492381502669665368250987483764997636499023338401220388192128660882550863628401408693591551294198176547377891515336203086672264276499806542373393332404294698173529592656969635332872681383383015235410936777522012280715646838888398788138501996798578444339610584775665970600194713558116559861541961442821808453945117627920298116214320938171403529561892297600415219363935728414939010096938734178134483986686714384491258386709142685544832103409818611667922953193888259643120486677154261328174457279086670708557157552344964124462257838383197728555755235368054366868180109047755464310626353069664174173445535573972021409973296283531240610090962847292891312603192404431673032629274734034139851468811599533687958442588785291795764315509122722898209787636156892468607771574823035280514790200983276060617633514581112649487874354333946422045255319560918636272621837236062744769154069152408641119194421389719574859865635744353124028560000224262365390570179980238516201369450053077702998672943266422806985508398542370254165762133224068438686181409409384490994081509242076511902715830355779407786021
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8ecbfa1666871d601c973b17d1cfb5270a916a27
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'banningrealestate.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016c013a20d20000040300483046022100d7a3dda9117802229ffadc7b4d2e4c1049a970c0dcc98478c264daf99a71d6ff022100e2075f3f4e31311bb3b97169d0f8b98c05846919272bd78dbdf3a18dc7af120300760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016c013a20f0000004030047304502207910f27c304447aeb840d86f7fdc46b58de332373d80e24494373010e04126120221008fe917b4c5d1b5380c37755f0a1aca32cea8dd2d5ffab38f5ec3cbf11b20f05c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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