trunking.org
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:26:62:f2:0d:4c:be:78:12:51:6e:ad:c2:0a:2c:29:b5:59 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=trunking.org
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:26:62:f2:0d:4c:be:78:12:51:6e:ad:c2:0a:2c:29:b5:59Serial Number (int): 274399108887454701243335583754494780487001
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 82:ab:41:9b:0f:af:53:1b:e7:25:4c:4b:a6:0e:b9:0f:25:99:b0:38
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 2a:50:65:95:84:62:ab:f6:10:74:87:43:de:55:77:6a:94:6e:85:22
Fingerprint (sha256): 3c:45:3d:d9:85:35:6c:d3:5e:27:83:ff:d9:e7:c7:9d:3c:43:1e:e6:33:c7:c4:94:da:8e:7d:b0:24:9d:2c:62
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate trunking.org
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for trunking.org
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
trunking.org
Other certificates including the domain name trunking.org
(limited to 100 certificates)
Certificate
The complete raw certificate details for trunking.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgISAyZi8g1MvngSUW6twgosKbVZMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA0MDIwMDA5MjlaFw0x OTA3MDEwMDA5MjlaMBcxFTATBgNVBAMTDHRydW5raW5nLm9yZzCCAiIwDQYJKoZI hvcNAQEBBQADggIPADCCAgoCggIBALLoXNfDAE0i2CFAZ7N3lEQvPU2EyURTnvA/ gQu96XiunLT6pTkTWM9M9uEpoUiLouScsnV0Ys956X5XwHjl0sTL8wdbObyjtBsN qVRHs1rjs26gBKq2exA7iJ8vTG+k0g0UeTknN5Wkheg8mw3q6or2KSbaPqnq9y/f yBhq+wdd7J/JFW/HvdtqlcBJYYWlnF5LNfp1uyEQXN5cWEMT5bhbvVpr0I6R00gg /cNxnRWkiJYJh9IbW7mR46nx/PkxMDBckvD1F21/VSIA4LvVWd9bcDibFZKybuWd Bypu83nY6OpeapiXobE9gddRjng8A9Oldf2pGXbsJoZc7ADme001IyaR5aD4KM4k VUF6PEzsRup3ZKAy/v5fb3/UuyLkLWALtiQOLXDp+uD+6d5L5051uVYTQS/noUG7 YNcfhsG+1sdFPqoiIEhX4uU6/LmtDCmtSlnCjXDFesJUMnh4bd1vGz2RF662gNRf 0ZmuSi0/OhvG+RsAR+oghjdOHmiSCf7QDcND+38yDtP4pIpvoE7XxounkvUbAsC7 fbrOAaMx0SYzdklXBCZm4Cqjl1IIXixd3TLTJ36qzFJ1aph2c8GLVqwLZ/OFGiMB y721zBy9bJlfMzASgPTPc9OBVZIEyxwpRKLTH87KiLL0dY6QOlI2tUQjgX/PKCEO uMqENDs9AgMBAAGjggJgMIICXDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYI KwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFIKrQZsP r1Mb5yVMS6YOuQ8lmbA4MB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyh MG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgz LmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgz LmxldHNlbmNyeXB0Lm9yZy8wFwYDVR0RBBAwDoIMdHJ1bmtpbmcub3JnMEwGA1Ud IARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0 dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBAwYKKwYBBAHWeQIEAgSB9ASB8QDv AHYAdH7agzGtMxCRIZzOJU9CcMK//V5CIAjGNzV55hB7zFYAAAFp25gOkgAABAMA RzBFAiEA10+XiEdC7ce0Z3Bx+VnDXuOZv1k8MlTZ1zodoiK7UHICIENv2XABr/so 5XtuiqYpJZAYvCJjUd+Yz8c6Y1Em/L6gAHUAY/Lbzeg7zCzPC3KEJ1drM6SNYXeP vXWmOLHHaFRL2I0AAAFp25gPFAAABAMARjBEAiBjYYWxup26n0PVq33qnd2Z4WBw 6dGj0f5EeV92W9RAEwIgSzWwXJULilKG6/FAJMt0FS2T+PnhnGkDp9OUzhArROAw DQYJKoZIhvcNAQELBQADggEBADOL3pUyJPgLl5o+00hpTPUEZZX52qTo2QTsd7UC 1ExW0XqQnGMjH/Vx17I0cTbSWwARBZ7GQE6uiU3JDNllZ0ZZyXQ6jUpm8Dlgwi3m 5G2YG/yDdSIBGh/megkb0pPehZeFUtsAqRzXWmZGo4r2FlQkavwe9gfZ1Vqy+EX1 1rWW4137S5GgcHX6B5sDCms7XdMMrXKPcY/edoqjhPOxVBQS9rqGdpEHM6i76kPu dfWfNIZcNjQLoAacBNMY4C4eZHHy3Y8cFCeJg+GrA25NSLM5zUayjXOwomYXJenE EgcfEXMqm4D+e79PW14BoNeAv3M2nlsBzCizauruePU2vGI= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAsuhc18MATSLYIUBns3eU RC89TYTJRFOe8D+BC73peK6ctPqlORNYz0z24SmhSIui5JyydXRiz3npflfAeOXS xMvzB1s5vKO0Gw2pVEezWuOzbqAEqrZ7EDuIny9Mb6TSDRR5OSc3laSF6DybDerq ivYpJto+qer3L9/IGGr7B13sn8kVb8e922qVwElhhaWcXks1+nW7IRBc3lxYQxPl uFu9WmvQjpHTSCD9w3GdFaSIlgmH0htbuZHjqfH8+TEwMFyS8PUXbX9VIgDgu9VZ 31twOJsVkrJu5Z0HKm7zedjo6l5qmJehsT2B11GOeDwD06V1/akZduwmhlzsAOZ7 TTUjJpHloPgoziRVQXo8TOxG6ndkoDL+/l9vf9S7IuQtYAu2JA4tcOn64P7p3kvn TnW5VhNBL+ehQbtg1x+Gwb7Wx0U+qiIgSFfi5Tr8ua0MKa1KWcKNcMV6wlQyeHht 3W8bPZEXrraA1F/Rma5KLT86G8b5GwBH6iCGN04eaJIJ/tANw0P7fzIO0/ikim+g TtfGi6eS9RsCwLt9us4BozHRJjN2SVcEJmbgKqOXUgheLF3dMtMnfqrMUnVqmHZz wYtWrAtn84UaIwHLvbXMHL1smV8zMBKA9M9z04FVkgTLHClEotMfzsqIsvR1jpA6 Uja1RCOBf88oIQ64yoQ0Oz0CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 274399108887454701243335583754494780487001 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-02 00:09:29 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-01 00:09:29 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'trunking.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 729879601049486117459153980812944210373461991731911483979573592914315278178674369181651430839929501481473421085490630025810139635916412697153040613921393430409552466266188549925107706184608834848944755093436145894136587855048180704836661678604213738929462072177329218049116561837096308636262208068054651540995503511650755219563684226422374827985694113886039585898698538366085049017157974525916715831613327809532912178208284473217645459083003217035425075610311573735080989882250279116205052826901271739637943607830855004417509121047950198388735122514573364118802548002835816642318548463108915142601019537780921759022637923799664154307315798924520052657866951299890736083147175730043800016788230847721854510704588461729160613334740964625987800184807996391978692029394180453720737824694795073312511730402514514390106218995235403279507921416398244565852061329673745994843373673034787768723227496014193284404837211459287898411027447513510741747797445649827091158376010732468973389106310674721105776040279445576606607967501888983262272894789950537064889671763708952093810849532216423968951722550980794892230409337645070780533443189734797218286115385996226187821117466632320130718060232012163708514556719899855990308212629595951430846659389 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 82ab419b0faf531be7254c4ba60eb90f2599b038 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trunking.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc5600000169db980e920000040300473045022100d74f97884742edc7b4677071f959c35ee399bf593c3254d9d73a1da222bb50720220436fd97001affb28e57b6e8aa629259018bc226351df98cfc73a635126fcbea000750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d00000169db980f1400000403004630440220636185b1ba9dba9f43d5ab7dea9ddd99e16070e9d1a3d1fe44795f765bd4401302204b35b05c950b8a5286ebf14024cb74152d93f8f9e19c6903a7d394ce102b44e0 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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