acquirefreedom.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:ea:82:34:1c:ed:66:60:a5:0b:94:42:97:ed:a5:49:80:d4 was issued on by Let's Encrypt.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=acquirefreedom.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ea:82:34:1c:ed:66:60:a5:0b:94:42:97:ed:a5:49:80:d4
Serial Number (int): 341136001880385250990227482358496241483988
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 77:79:d1:33:0b:b3:49:d0:68:02:a6:bc:52:85:4c:9e:5a:6c:b8:50
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 2c:81:fd:e8:63:0a:96:92:55:ac:6e:01:f0:4b:3f:6a:d1:94:5a:70
Fingerprint (sha256): 32:c2:73:62:7a:ee:fe:91:30:91:16:f4:dc:8a:5e:95:59:ae:4a:75:bb:f3:f2:8e:3a:76:9b:70:9e:c5:5e:62

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate acquirefreedom.com

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for acquirefreedom.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

acquirefreedom.com
webmail.acquirefreedom.com
www.acquirefreedom.com

Other certificates including the domain name acquirefreedom.com

(limited to 100 certificates)
acquirefreedom.com
acquirefreedom.com
acquirefreedom.itg-company.com
acquirefreedom.com
acquirefreedom.com
acquirefreedom.com
acquirefreedom.com
acquirefreedom.com
acquirefreedom.com
acquirefreedom.com
acquirefreedom.com
acquirefreedom.com
acquirefreedom.com
acquirefreedom.com
acquirefreedom.com
acquirefreedom.com
acquirefreedom.com
acquirefreedom.com

Certificate

The complete raw certificate details for acquirefreedom.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyGg3GuGDwZnYomjKhexO
De2v80Fy3Uda1384E7e4xfkTByWslnzenUDo9DtKwH4Nk6bpaT9TKuumXjEdkCeQ
gkLcqSZH2I04VbqmF32AEvrC6XYpkP5wIw0m9L1Rw7YT1a7/jyPckBdbm6ECPRtF
ASSQzflzQq6E5gDlrv6FomAw4PA8h8Vw/XM7jBbfT8oxPfRY+Zhj8E5t79mpgRqi
eyAEFtVJAOxOjRBwOb4hDGbEQh8yF4G6rNbnf8D6tUnLRV2g7hzydi40jHXZnaxQ
OB5jU7G9IHiC2babk0Ah+s8m48EJ05yg0gZVYhaUQEdmcNrpQpa6Or2FYMPCRhgE
5wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 341136001880385250990227482358496241483988
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-06 22:48:39 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-05 22:48:39 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'acquirefreedom.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25299051450268358006876912001384285111832519024839433850737677397028881971860049318784603578976411784864801596122631997970338915358195692403598473133900288559266354257654461808831774299403733418941858352383882181926536615835208215878735392502310208530077453830553504917576807067694362825014387229564886674674322774003299274340661985642733201238614474781798697963773596075420974688847570599091211906904118019015747064845845526916898881841090602147444444527746668835759204108567788854080292222190497887959469491088453440418481494108131257558517438213398472899496775107728913839572410632936485974703519475135135755011303
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7779d1330bb349d06802a6bc52854c9e5a6cb850
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquirefreedom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.acquirefreedom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.acquirefreedom.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000017151e560e600000403004730450220132f356863aafdb2b4cbb591a703222c28a1bd092e3a95eea2497f2afb6c2087022100d6d90035d0f1900699d0c4b69059a5a87a7e38b4626a2e530f224e1fcd2cee330075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000017151e5611b00000403004630440220349688863e8a4d9115cca9ae9ffc1b97858eb2a28f11f338fbe591af918966a3022055c0ab81f9109be8a845b40b9a005d2dccbfd2026fc8ffa8214215868829746e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00827a511e3792bcf8b1df87bb9e9ffd09fadc1d4b5d695b433918ea960a7c40c4f05d5f276f7c7939a52ef8815a8f47c2649462ffbeaa902dd16cd9240379842546f0bef94db6da0f2ac207d0b7df710cf1f406f272ff0c9129c8b75a99cec125ffd430f60df5099c50934733dc4ffc8269411d969f65411d047b569c661826e0f73e5f60c6339d3483fd1a89ce68dfcd843333a68619d9c2ec6a77a9b320642819c3e3612ea60f4d8c75c6e2a4258ebf7f29bd3aa119ba55bcc7491b37a4f9fa401eccbdf02dbd0627c21684aab28369b7d78c3626987aeab5e6d9e8d67bf393f6520735fe633e353583f64e2097fddb121023391bd0f43752d1065ebd4396cf