mosmai.me

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:b8:20:4a:74:87:d7:6d:e4:a4:39:a1:d4:bb:25:0a:38:91 was issued on by Let's Encrypt.

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=mosmai.me

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b8:20:4a:74:87:d7:6d:e4:a4:39:a1:d4:bb:25:0a:38:91
Serial Number (int): 323991735198088054195084418251665256888465
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:5c:a3:15:6c:ae:b6:99:bb:73:d4:64:bd:d5:c4:0d:46:e9:d3:d3
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 40:ea:09:bd:76:c1:f7:34:db:06:79:fd:4a:95:25:29:cf:e5:99:b9
Fingerprint (sha256): 2d:e1:5a:1b:a8:04:bd:b4:ae:05:69:5b:93:72:25:10:6a:77:ac:b6:38:cd:af:0f:16:9e:ea:b1:81:33:52:0f

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate mosmai.me

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mosmai.me

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ftp.mosmai.me
mail.mosmai.me
mosmai.me
mywater.mosmai.me
pop.mosmai.me
smtp.mosmai.me
www.mosmai.me
www.mywater.mosmai.me

Other certificates including the domain name mosmai.me

(limited to 100 certificates)

Certificate

The complete raw certificate details for mosmai.me in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 323991735198088054195084418251665256888465
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-30 12:33:53 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-29 12:33:53 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mosmai.me'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 824544472482915213655143156581212366044184174679477722848139792246152742872861960470225771385960311223823110071764954388009738834339666789051185556447017503601727647657724659106283383932752444962107225811148650872902569855020513410970788674240088421229596122174531501936914568065515815555318493375863650447811513189851622285327459954356508880860979277584373168846625548527444214852368314662536048055419550852339015081526241671280415397832285587883743454454435250545769390050460116706121177008095743764893153138146211509577154898995696140766777082670995579569870765141365607640673561860262120558706844009286224861375264504778050394181027589977578932743651990180520860893877655111621968637095630532976768797631254275683541942577862099863893309332748686983049042178875592425780185111641122227351496751460737360910478992820113950570212342369633478608796901932098970689987867085367928467001546444621062593268251444886316507108806559870523097585908569163724743201806252416314086713639225218545792475938069799574412844793801237791218900626154052476572166217580823310682301639733985003305617302996499063716118120822230194625041654578404107614998186090842762774720683536190786676803124537494272127701350287541321297043005794911411435293321847
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f5ca3156caeb699bb73d464bdd5c40d46e9d3d3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (133 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ftp.mosmai.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.mosmai.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mosmai.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mywater.mosmai.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pop.mosmai.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smtp.mosmai.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mosmai.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mywater.mosmai.me'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016ff6a877cd0000040300483046022100bf43f3064c9d418c61d15f4a412fabf1292e702bd2f230bdc0ab20fc4c20d069022100a7adbe19ede5d4c8014ceee31abd0b10f99cfc0d39e903681fafac314f2d46a900750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016ff6a878070000040300463044022008418e4ed2539be83f97ade3554afa7ee9d31200c32368772968510743fe13ac022007d1d828ee3518318bb5c334d84b2f34b75363d5a398142d34cb18cf8f7283a2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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