www.motorhomeforhire.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:3f:f9:81:ac:ba:aa:61:ef:0f:3d:4a:83:d0:d7:b9:d8:af was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.motorhomeforhire.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:3f:f9:81:ac:ba:aa:61:ef:0f:3d:4a:83:d0:d7:b9:d8:af
Serial Number (int): 283106297991908679085322745214143649405103
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: dd:ac:fa:57:74:ac:8d:eb:64:7d:24:80:59:40:f5:e9:38:6c:e5:ac
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 6f:39:b2:d8:66:b5:47:c0:86:5a:ef:91:35:45:ad:9a:c2:31:b6:80
Fingerprint (sha256): 3a:cf:1a:66:14:60:23:9d:cc:fc:29:2f:0d:b3:bd:9d:35:c0:b1:3a:a7:2d:6d:82:aa:81:d6:b9:b4:5e:6f:b7

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.motorhomeforhire.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.motorhomeforhire.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.motorhomeforhire.com

Other certificates including the domain name motorhomeforhire.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.motorhomeforhire.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 283106297991908679085322745214143649405103
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-29 19:57:32 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-28 19:57:32 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.motorhomeforhire.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 860631110642279063132423352683160594587801003288188953426553300662067769957984002283578526249739410861276083505361314585576736543030600042923603304545904477570836080646344006463553437241581344408770756258746104588670609181133264879820481264879547807708955461903208014426696595788981993340799720895840713874056419558576528236396233358383379164077478377147061375693892428655607801199476787269827680898814006718135596539974952226622091757335816895630873784513555064079194972254748358345163021288790781461892909619959418363005225129926444616443404578878217038666402446322823398181478160798807065802318229309194187212328150584129517173728106734489465774197125424575490658422454041537009217193920726423904361604134195569636468584944803149831701002162126150200520474641978830992639132916986234378148470820998463638871862976358218000721635401634641778822651265285915448370922463618326506056218036959905298720528278488787309186078391922733492635758117740819757946560430350022004026164492836632141843330751286560151722197370002599877722536182932574347948524641996831282623086075706714956171126352537252553666578688108892804666618367910528861020348148448474316314569248518222363427042754967177020585349824221133356586404159540733507927829776221
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ddacfa5774ac8deb647d24805940f5e9386ce5ac
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.motorhomeforhire.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016ff31847cf000004030047304502202076978dc89262d9c09700d10b57bf5f107fcdaf1cdf6a5ec4b507767ca41b40022100838f75f3d7d8f5f28318cf11b4e1ff57a22161754c131448c127d938c797f089007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016ff31847c100000403004730450221008e174803da82643f4716582b020c845616f437d5e544a527b368e4140668da7c02200107d8b085947532b9bd33c69dad3d740d38526cc4909fffc093ef0db927accb
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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