try.lonestarmri.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:5a:ab:18:75:4b:30:74:00:d3:c5:45:b4:7d:70:f0:89:e4 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=try.lonestarmri.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:5a:ab:18:75:4b:30:74:00:d3:c5:45:b4:7d:70:f0:89:e4
Serial Number (int): 379301981731328305083917191165639318866404
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: f8:62:dd:07:37:0e:a0:0f:9a:f0:b8:5b:0c:07:b8:da:e1:ca:8e:e3
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): b0:ad:d6:06:8f:e1:76:c8:b6:92:da:9c:ed:0d:6f:95:ac:63:34:51
Fingerprint (sha256): 32:52:df:6f:61:c1:28:01:0b:38:e0:83:7c:90:1b:1f:8c:bd:16:d2:d6:c1:84:38:70:2c:ba:4d:a4:86:71:7d

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate try.lonestarmri.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for try.lonestarmri.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

try.lonestarmri.com

Other certificates including the domain name lonestarmri.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for try.lonestarmri.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGXTCCBUWgAwIBAgISBFqrGHVLMHQA08VFtH1w8InkMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTAxMjQxMTE1MTJaFw0x
OTA0MjQxMTE1MTJaMB4xHDAaBgNVBAMTE3RyeS5sb25lc3Rhcm1yaS5jb20wggIi
MA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDAkCSw6syW+Qoy+SOUqw8/m7S3
oP+qBTPUKYu4nqaLC+Sq0b4WK9p6FHo4eG8PTwbV9N8JlwuooYNX7C8ypSMLJYyT
YFEs4OhCSSj6MAmbFSmAoc+qXqFyroBwHmWIgRmyJaZIJUNK/upX21tb9I7WOCPC
vRWO2NR4QW0kdR52zJMI7aozN3WAY9K7ndq1xt36b2PwsTnOzz95Zb8ASvyUUVvQ
yLDru01ChT2+2ySuTmzhv5UGsHQoIgx/6ulNmKGjqD+Jed1jtZSvPMHcre7ejRUD
yLuEsnI+czfjHJ2NRu9Z/pxEq7FVTdwxiw8ikelijTojeIMvWAAXKlttWrYBioxu
c78Fe8+EsvGY2hAln67rGqdEPkcBtytHhOraD+xR+Sof9PaLRB81kh1W3vFvlbwQ
2cnyb701LwbYR2qt0RY5IwjIT9hnXGcoQeF9chXa06Ky4uYUM+48Es21Dm18izmc
+/isC8sh3VFBkAgRGLiiDWxbhuo+KVUOCTL4DohdgWGVXMVsCF54TF1YMcGl3Odc
IOuI9qd6C4GSJF2nUJqeqt5sqLGXhUaS8AnBi/C73NZMlA8srskIGK5RM5wubQYZ
XwUz6M5hQvwRNzI+KVm0K8tCsyEc/Ga7hxOVItGWqS5mVXqKIa2PA7m80fcueKd7
OfvjBeJHlKN3ID35/wIDAQABo4ICZzCCAmMwDgYDVR0PAQH/BAQDAgWgMB0GA1Ud
JQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQW
BBT4Yt0HNw6gD5rwuFsMB7ja4cqO4zAfBgNVHSMEGDAWgBSoSmpjBH3duubRObem
RWXv86jsoTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3Nw
LmludC14My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0
LmludC14My5sZXRzZW5jcnlwdC5vcmcvMB4GA1UdEQQXMBWCE3RyeS5sb25lc3Rh
cm1yaS5jb20wTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAm
BggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEDBgorBgEE
AdZ5AgQCBIH0BIHxAO8AdgBVgdTCFpA2AUrqC5tXPFPwwOQ4eHAlCBcvo6odBxPT
DAAAAWh/yRmoAAAEAwBHMEUCIAt2HE0AsB6D/qbR+P3JM51B7D/6qAkgsncKKeXo
1mL9AiEA+uKLR7UC5LwpSmB4c93ag+i7+73bQbiwZprJWddwlcYAdQApPFGWVMg5
ZbqqUPxYB9S3b79Yeily3KTDDPTlRUf0eAAAAWh/yRmQAAAEAwBGMEQCIDuz66YZ
Pw3cOp3AxO42vhHd4as5nStZ9K54jHMoYQ/FAiBMk4VO2hVjPVzVFc/oY0CrXrIK
TRJPl4jRLI1HM+FeFTANBgkqhkiG9w0BAQsFAAOCAQEAXEgan7GQwBFqKXVfmt+B
+Y9mwIVRVt4ETM1KX8dfdjkoFVgYV4DpoeQpgDQ/vaN3joojorBsZ0RfF66N5Mp5
7cwR+baFOgfRM5ZYr5TOBLy29ftaNU22BaQklQ8oxXdYIF6HtAGzxtbLmD88GAnD
qfe3LdZSSVCTqeu+xRSi6M1RqN5AFFQiiNw1e9J5pOpnQf/kMVdaH7GsWBz2Lm49
RNWbP2NMbE2oQ6KIt7tlSuSn4koyCQOT/x5Gh+uaxGrS1DajqPQh+OfdQV5LS/vl
YGvBIyXze8Ce4PUxB09ImchGT10oYNr3m/Dha4bD67qnfUkaNzu3Htie3NmA6+xW
3w==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 379301981731328305083917191165639318866404
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-24 11:15:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-24 11:15:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'try.lonestarmri.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 785588744883741163494016559587071675980361787307218507546738584964602451089309564252153825418799546032248534461541376445489415131861167763463634397906559422541143188219515464924537729039387773019683840192965261135385508696334018259884293648304693235470471502116064049718489853607822664791392184405974673562789854622693649372280520836144432699848948535959517289216911712757549209650586415399549817182674915440137201744951906049789115348441042977306731940082081737845836799837216282011450335019800191147616765846376719393686459231513274524283754227661762697546997241247461290291380860794310302905256180843906750486392142911651025360521668554611533587923865306243861677345274613137596407057645050401822237659152680990355288235419698948806061051367716601675248950102622327753322341824551115970279673765411679714481021571638191876664656481059189475816782454984756505445015562030754667336286526610786637296087563877802659511507439239640787450967523343202519244654320326543626787606992492390041456305512251315991707236662733301625222111404969966556703751093136032685421409321024832579983487778053660293577118584033150483329632678056822625184353166394997915695901675356477048043365992821706498590231176754063969702545384724363091078857751039
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f862dd07370ea00f9af0b85b0c07b8dae1ca8ee3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.lonestarmri.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c000001687fc919a8000004030047304502200b761c4d00b01e83fea6d1f8fdc9339d41ec3ffaa80920b2770a29e5e8d662fd022100fae28b47b502e4bc294a607873ddda83e8bbfbbddb41b8b0669ac959d77095c6007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001687fc91990000004030046304402203bb3eba6193f0ddc3a9dc0c4ee36be11dde1ab399d2b59f4ae788c7328610fc502204c93854eda15633d5cd515cfe86340ab5eb20a4d124f9788d12c8d4733e15e15
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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