www.mensola.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:04:ec:ae:cd:04:ec:b5:99:4c:63:ed:83:15:7f:10:95:1b was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.mensola.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:04:ec:ae:cd:04:ec:b5:99:4c:63:ed:83:15:7f:10:95:1b
Serial Number (int): 350124878619667505046833666140270754829595
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 9f:26:79:ed:3b:3d:27:28:73:e5:67:5e:07:f6:82:75:d5:58:16:17
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ab:7a:4b:9c:af:30:d4:33:6c:9b:65:88:ab:f6:e0:37:b2:b5:fe:4f
Fingerprint (sha256): 2b:23:46:5b:e1:ab:ae:cb:ec:13:a2:a0:f4:4b:6c:95:75:67:ff:55:c6:83:3e:58:26:0d:8d:6c:89:59:ae:6e

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.mensola.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.mensola.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.mensola.com

Other certificates including the domain name mensola.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.mensola.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 350124878619667505046833666140270754829595
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-04 03:01:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-03 03:01:19 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.mensola.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 643114583572316901040086919796015258332748070641441259108297966122451140776169737372284615455409187738512723154661392851677970501677070196913328107531781567166836649842846318107567239605108952156759095485917580921267814727265803511560088040871787351184512725686496333509069339389216980030957184528594677206603851913705719684137403947170415235232141280342542004537928662250399032197793658604524535343974373786240739996490986726177562431150947787792618080913053787403591446603922962230753212588200566029977294474782741581811873273038017357844050910646028281486559797061515332707427194725743044179614157966282820412268121207347241671195652861124201532240030852744769457756717290182969884389359569997126854318459001313014523804080406137991316211463851819266511304187345517273581611399986065290248823207673720457092361407819426311908705236235699280460021276326101736894785101790885640394696021765408248936909658352820955657414264323916715223782164327215312862502530811840190612681020957026479040209277655903513560074175227031191813710470584903661670062618389589785360218018567362428418225758345637012582426373431122426519183724664021683166459755674945627887643184985519077347606317595957243299412900554541348919658565685414478443099904027
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9f2679ed3b3d272873e5675e07f68275d5581617
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mensola.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016ecf11c97e0000040300473045022100b13ba3f2fa25d5aad9a46853d1e4afef6bf8c4eade31f0470313be0914cf9544022058da425438831f3f34b7087f7702463d3176b239a3ad5ffba7d81ce5affaa879007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016ecf11c981000004030046304402204532c6c4cc63da02be84642bd97f6fac4b5a6e599899b9cc8683bc1448cd00e4022012ed09e64eed3c5e7c66531e149aafc1801c605479e2ce84ca2ea9a4778e3c9d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		004ecaeaaf71c85ed6d1ce275f88e082afc9960b3f228ccea83cffb5ecdd45daeaadaeb2696776d6b40e95294be00c1fb358467d2eafbf53a4af7059c90d081d34cfce5a8a500712c722e567c26ea81f2be5a73b05ff3f369c5d46150fd1ea641c8e49a15c62500e58f13dce90996bcb03c4e04eb9e2512e5b37dc707b8a6d4d656fc9afbea6a46a9e5de9c0786e6146cfdfa6187900302e399d72a68611b5a7a2da512ef9ab38b9cca45aa6cb0b597288a7de66ba9b5b2fe5990073f186de9ec3cb36e0624b2634505bda369797f107d8c5644652cfcbfe34f06d08d1ac759006a68c2297ebf5feddb5a4135e28283a89757af3059ee7461d175c494b5d581400