somersetretreats.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:0e:1a:c7:99:92:2f:d0:62:c9:9b:c5:5f:51:ac:a4:e5:68 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=somersetretreats.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:0e:1a:c7:99:92:2f:d0:62:c9:9b:c5:5f:51:ac:a4:e5:68
Serial Number (int): 266136407241929913476083706140156347344232
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 41:68:3d:e9:4a:56:85:aa:b6:fb:1b:0b:03:35:71:de:79:37:c1:36
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 2c:9d:38:d6:50:74:fa:e0:dd:cf:7a:1f:a5:f2:1b:e1:47:25:1f:1f
Fingerprint (sha256): 3c:d2:12:fc:b3:1f:1a:4d:29:f1:61:b5:d3:65:8d:63:4b:4d:20:dc:32:e9:3f:b6:a9:3a:34:e0:ce:ce:98:c9

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate somersetretreats.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for somersetretreats.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

somersetretreats.com

Other certificates including the domain name somersetretreats.com

(limited to 100 certificates)
somersetretreats.com
www.somersetretreats.com
www.somersetretreats.com
www.somersetretreats.com
somersetretreats.com
somersetretreats.com
somersetretreats.com
somersetretreats.com
www.somersetretreats.com
www.somersetretreats.com
www.somersetretreats.com
somersetretreats.com
somersetretreats.com
somersetretreats.com
www.somersetretreats.com
www.somersetretreats.com
www.somersetretreats.com
somersetretreats.com
somersetretreats.com
www.somersetretreats.com
www.somersetretreats.com
www.somersetretreats.com

Certificate

The complete raw certificate details for somersetretreats.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 266136407241929913476083706140156347344232
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-29 11:51:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-28 11:51:21 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'somersetretreats.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 887809767843713105776268799468323265469511074922051702876091896983645019253943941012439169663366766834754303286434289616363998090797339045782298094228760751196194420118317844454825813156329650307320340575096513420296453216365591126469514752296826155137224814391772624481250897612725352260590084685119159358608231328100434139802229498339245521091306235745777412346791791714638705714274779058763743455863504870958936319917539936825000029627924340132832532765542517408724205077305099818759700221421477446548303613330771982992065024985563067610794620308868221548920488671737829138131554234035681044452393687991088140856318603380775126012044146694941110160006808551008879576303029245597078377747023613653856718575790813084381234580500869819031938070700419817189096407293386803948357163950163771517534700266347789161551426760291864912854468739642323331547994582772397417085267443410370067826358927644731476703351423788161087100866891427908912982848782031531788107338639312587683338456689597140086900894172170837026850317642785689264504496647952918122166991453768831895412079688209935507274546643381769085922175528925257184371481910423713672299449242752178122558908295781698365120273744507965166931934568036031638935475611001461024891142047
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							41683de94a5685aab6fb1b0b033571de7937c136
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'somersetretreats.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016ff15b2d650000040300473045022100b14aad5760202a078a130bad3fb0e2938cc6b5b68ab033c222aa69b8796f2fe8022048d5737a285582899d8e5097de0f3b189606bcc33a7eee113dfa525958aecb6600760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016ff15b2d850000040300473045022100bfcff7940afc6209f87a9d3b4b9e22e88391c0986c755fe75d5cde2ef087ab5302202e8fa8a9e3ca09c3f0d38330a7703ade0957b1f23f40b8ef6457cfe550707abc
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0058e0fc196c8f4460e9c9007aa8059ad6218d2dfb33880eb56d5d0523a0f91b271fc3e6ddf5f7c2cb31b3c1d856eaeb4c633f325f5733368b7e71cea48502d7fccc2fd0f3e7120715d805d470775546e26ac58c0bace1efe17c0278251cae8da19368b18a8c768a891de95d47a3c683ecc5c9eec26438345b55fc27272d883f93909ee72641292d9a24ab11eba3b4147268094501b3273c93e6a274e0a38e7b4f830ae65468e018759711e982559b101dbfa2567f53dddb7f961f89022cf52db02ef6af0eea0e079d40d5914fbb648bc690fe4f2df0c98ccb4e289abe2f9ecf968290331bbf262268e5da029eccc6db967ada0333824976a56e10a524c215b5a9