sbensonlegal.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:d4:d5:0b:c9:f6:ba:5a:a2:63:1c:8c:65:b5:9d:6b:e8:49 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=sbensonlegal.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d4:d5:0b:c9:f6:ba:5a:a2:63:1c:8c:65:b5:9d:6b:e8:49
Serial Number (int): 333759906357199457252636512802390311430217
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d3:b0:27:16:f4:d5:f5:49:89:e2:ba:1f:15:52:6c:f8:75:88:6b:85
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 74:a9:f7:e9:c7:e8:ed:4f:b3:33:d2:19:67:b7:a8:0c:b6:cc:29:62
Fingerprint (sha256): 36:58:d1:64:dc:dd:b1:23:8f:dd:d1:49:76:6b:3a:e4:2c:7f:a3:4a:0b:ca:fc:f6:62:96:ea:a5:22:92:e4:cf

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate sbensonlegal.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sbensonlegal.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sbensonlegal.com
www.sbensonlegal.com

Other certificates including the domain name sbensonlegal.com

(limited to 100 certificates)
athavan.cdomaintest.tk
affiliates.schoolbanks.com
suporte.controladoria.digital
suporte.controladoria.digital
chat.invigoro.co
support.xformative.cloud
chat.invigoro.co
desk.churchadm.com
ajuda.receitadigital.com
www.sbensonlegal.com
helpdesk.yourtekpro.com
chat.invigoro.co
ajuda.receitadigital.com
suporte.controladoria.digital
cliq.itseasyco.com
support.strident.uk.com
projects.consolidinc.com
soporte.masin.co
support.aztec.city
suporte.escritax.com.br
suporte.controladoria.digital
support.strident.uk.com
webmail.msvox.com.br
chat.invigoro.co
suporte.controladoria.digital
comunicacion.adsertor.mx
suporte.controladoria.digital
ajuda.receitadigital.com
suporte.controladoria.digital
forms.theelenigroup.com
projects.sbensonlegal.com
forms.im4u.world
form.clash-event.co.kr
chat.invigoro.co
tickets.onlinemarketing-zentrum.ch
meetings.oprisync.com
support.mindsize.com
chat.invigoro.co
cliq.studio5.dev
chat.invigoro.co
suporte.escritax.com.br
suporte.controladoria.digital
collabs.quantum-horizon.space
suporte.controladoria.digital
mail.guyotlaw.com
suporte.controladoria.digital
soporte.masin.co
support.mindsize.com
register.brightfocus.org
comunicacion.adsertor.mx
suporte.controladoria.digital
suporte.controladoria.digital
chat.tekkit.ca
register.brightfocus.org
projects.sbensonlegal.com
sbensonlegal.com
shop.medicarehero.com
helpdesk.yourtekpro.com
connect.villaroecapital.com
soporte.peruapps.com.pe
desk.churchadm.com
autod.alsubaihisons.com
cliq.omnizant.com
sbensonlegal.com
suporte.controladoria.digital
chat.invigoro.co
forms.im4u.world
suporte.controladoria.digital
chat.invigoro.co
suporte.controladoria.digital
chat.invigoro.co
ajuda.receitadigital.com
suporte.controladoria.digital
suporte.controladoria.digital
ajuda.receitadigital.com
suporte.controladoria.digital
zohovalidator.icheers.com.br
desk.churchadm.com
eventos.ingresso.com
chat.tekkit.ca
sbensonlegal.com
sbensonlegal.com
collabs.quantum-horizon.space
ajuda.receitadigital.com
chat.invigoro.co
chat.invigoro.co
www.modernpriceaction.com
chat.invigoro.co
support.lumenave.com
www.ten4noon.com
suporte.controladoria.digital
webmail.simpremium.com.br
chat.invigoro.co
chat.invigoro.co
suporte.controladoria.digital
suporte.controladoria.digital
mail.sippa.org.sb
helpdesk.bhamtastic.com
support.zilmoney.com
ajuda.receitadigital.com

Certificate

The complete raw certificate details for sbensonlegal.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg9MhlHNrSDIZtZAXnC8m
48LQCrqieCwkSILu2Q7M7ITibDaaBfHTrmUzID8TL9YFoq/M1J2wRnNySrDEUAn7
VfWq2oJMbdveMM8z5rRBaFkyzI3mcPaquSu6OkUL541Hg4TMr6otipsQMYSL+kLc
J/KtfurOacqLYVQdf7xJ5NzJcTBNFE3zniwT0MstYGudDfhvIn3WXSo14FZbjJx1
rH2k52PXZ0nSzNvUQdhrJ6zUXAkZjC21GTg8gLyydfpTmHGt4QytEQE2dI7gYcBF
G7sIYrE90IJSd8P0d5uMjnugi6uESXKqSL/ZKEsp4Rny5c+WzLYmcjVhtgFI4R4n
3QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 333759906357199457252636512802390311430217
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-28 01:13:51 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-26 01:13:51 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sbensonlegal.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 16641330611517971117760343589065429810683857397380148430949025288403848116776587262531692679609206522568131494309472498429652375021378143642525804678369638429062405330959692539806972708585615711311569854864312125576108255595864131058339474787998605086195315938720087068085706298919460190018229862011828595444219748500213015309785622423560668246184062915801553213050104908706962263478421593289972683800963460613789556099145515906257886613734443735200251459277455736817310849494793172212323857371983579747566987556557990669452338158110611239517814291948025090192039438152975231816560283775528253128772279074641535707101
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d3b02716f4d5f54989e2ba1f15526cf875886b85
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sbensonlegal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sbensonlegal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000166b872ecac0000040300463044022010e0e326bfa8e484e80d5d334b72e129e459305410895f2ae7cb929d1f1ee9d60220637d32755a8be5aef23e809dc45f15e58c84773c4fb0daf9712f1c01480af8830076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000166b872ecfb0000040300473045022100f7d98d9f128a73554403640ba7cb30dbb9d26a93da35ca280853f2a104adc105022043bf57577fad3bd074b73b880e38a1644862d7866c8dc5eb783d041dfe0aca0e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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