www.2s.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:3d:99:1c:f2:2a:f1:21:5c:40:31:7f:ce:e8:86:19:cf:de was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.2s.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:3d:99:1c:f2:2a:f1:21:5c:40:31:7f:ce:e8:86:19:cf:de
Serial Number (int): 282297604356870450441729641955197802106846
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d5:31:b2:62:94:d2:6e:fb:38:32:55:df:45:be:4d:9c:66:a4:25:b9
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 21:89:2c:60:f0:6b:c9:4f:73:67:5a:f6:d6:c3:35:52:49:d1:76:a7
Fingerprint (sha256): 39:24:37:37:0a:57:2e:0f:0d:89:3d:f7:71:ac:63:f9:f3:13:17:97:30:7a:7c:13:1c:56:2a:33:dc:5b:f2:0d

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.2s.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.2s.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.2s.org

Other certificates including the domain name 2s.org

(limited to 100 certificates)
2s.org
2s.org
2s.org
www.2s.org
2s.org
2s.org
www.2s.org
2s.org
www.2s.org
www.2s.org
2s.org
www.2s.org
2s.org
2s.org
www.2s.org

Certificate

The complete raw certificate details for www.2s.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 282297604356870450441729641955197802106846
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-16 03:34:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-15 03:34:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.2s.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 963511083189676186701547979940460503905857037099181589735482721399168939125425587365185728387831876372277071673094075466116896124129832720944586415180132584677862972966488692349979511240242999343218428930946532198624030650717936846699488524200719731311698851521778129892305031622044189968283994649261263991778733850765473266194741192437964247271671280505318189523903800620725461575766815705991042180674864109786820957766657050039057320629024056647328461044811404439020078373183906390355734959178801150104281740042413369395520246208904901689956863878997559505746380125820381081558016715914073240523100779817171452162891247040788414191213161159140320608232048808388336859615651016517320678184012109066845919838900704649923045485281519892037573682912544175555260613924336226626181544258485779941759583607449226474420233581151237052479189329662122188156467445723314775031458869657838704801871809327838392729363477178764144262377901182753063920926941363972639172235437278423793582237194537509392914405068574650427327407214977732342152568270445838519462772889739805013999114916218535345280451280189540304854202860607504505929360719678960450290163670494816368724669800742494146836605988548779150801065448330956849281554910666145303911216713
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d531b26294d26efb383255df45be4d9c66a425b9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (14 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.2s.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016f0cfc533e0000040300473045022100c24e221c83b1c788088bcec174108a3ea93401284f535809d966126a41b27f520220456951eb1631804361e6843dbf1c31fb0c9aac903107679fb4d33783a25a8ce50076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016f0cfc537500000403004730450220155b0ec9beff0aeb5c0093ab92179d58ec69a0564d2619aae0f021c613a8d897022100ad9930219e8b2883ae9e8feb8741b42635ef67864e285a456ce5dae0a997312b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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