stasgroup.us

Issued by R3

About this certificate

This digital certificate with serial number 03:d3:a6:a9:4d:48:c3:4e:3c:b9:f8:6f:0b:d1:92:14:4c:08 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=stasgroup.us

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:d3:a6:a9:4d:48:c3:4e:3c:b9:f8:6f:0b:d1:92:14:4c:08
Serial Number (int): 333357968128578555493522279647591255002120
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 42:49:75:75:68:fb:8c:05:46:84:76:c8:9e:03:37:e2:95:eb:f1:02
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): b6:b7:97:4c:28:87:6e:c8:52:8d:1a:67:1a:33:15:10:84:1c:31:c0
Fingerprint (sha256): 2f:5a:12:e8:af:99:cc:80:26:31:d3:e9:2e:15:ca:72:75:84:f5:c4:09:e5:2c:06:7d:53:b6:5d:21:f9:81:86

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate stasgroup.us

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for stasgroup.us

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

stasgroup.us
www.stasgroup.us

Other certificates including the domain name stasgroup.us

(limited to 100 certificates)

Certificate

The complete raw certificate details for stasgroup.us in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+6fXBCxUWZ2bQ1mS8+E
P5FH2HQSHexjy0gKXAltAl6fEN0Swpdy9oTInuks0tuRGIvE9+xauKkFmewft5I5
vQtMLIo8QaeAPWQourjdvrDOFE6wDPLTtx1IU/apwB203t1zc8P+MerP7Oa6Ndpx
nL5S84nY/nox1/2SQvnGU9oB0JiqqAXK5u9iGA9EdUaS/yX38uT2ZLcMscD79xeC
KsRaVafB4/52JoCZ9pPXjLyjMiOu/jTETLH7moNA7PsPanqDyKN0iaaF+nxgQTp7
l9hgm1eDBCgWotHvRPabTJtMTjb0/DXyYt1enyBBE9nLE6oTh217qtnPMNs/rv04
4wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 333357968128578555493522279647591255002120
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-13 09:40:36 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-12 09:40:35 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'stasgroup.us'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22714325728550143080069604631555019306118407586913467544988262584889273865458411775147726941808809771393924398163119582158755598878484424098249573204778854540627596557044966007955311530920978727708156501278773590832348136879764998978902863107529486616229043571476347256703067128489191927481865550007882456865418551219138391863723911757144015225150391348381858639122883257848242136480549849248059462301690893076324148073187132883477686582650001899149882597883698775750169377804662237303504908282978694693179896525841644576358643971155763457243204669151971667489020821927522500147142412898789358170150989681836850755811
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4249757568fb8c05468476c89e0337e295ebf102
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stasgroup.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stasgroup.us'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018ed70b75110000040300463044022037c568a04e3f031560b768a42f0e8eaa6f6572de16fbd74fc66e6a54fbdcb8cb02201c09fe310b8bea1932aebb774caf84874f6ad222105f452e0b69fa91bfda3fe10075001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca0000018ed70b75300000040300463044022075deea365a9c5a3eb739b08c9b048f0899b843f3b951f9ff4b3e2ac91e16a4a00220566418a733d17435c00efc7bf62eebe7aa1a5746a499f5e6ced023d680a51a3e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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