www.rossroofing1950.com

Issued by R3

About this certificate

This digital certificate with serial number 04:27:2a:a1:c8:5a:ab:65:c8:04:10:c8:06:7c:9d:99:66:ee was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.rossroofing1950.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:27:2a:a1:c8:5a:ab:65:c8:04:10:c8:06:7c:9d:99:66:ee
Serial Number (int): 361776823636240277574830760037434303014638
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 4c:63:67:95:9a:15:cb:9e:e6:45:5c:7d:af:1d:26:3a:28:44:83:d5
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): b4:13:0f:f7:5a:7c:37:c9:b9:09:5c:6b:1f:76:00:51:78:8e:ff:7d
Fingerprint (sha256): 3c:d7:b7:fb:49:f3:d9:ff:aa:81:53:91:c7:6e:16:7c:41:55:31:be:fd:b6:c2:6a:65:fe:81:48:a3:e7:c4:bf

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.rossroofing1950.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.rossroofing1950.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

rossroofing1950.com
www.rossroofing1950.com

Other certificates including the domain name rossroofing1950.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.rossroofing1950.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 361776823636240277574830760037434303014638
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-10 07:12:45 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-09 07:12:44 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.rossroofing1950.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 755687381116540625027505921841681188473592388781898145804318832822962894949804506504033601090308249273125054945290193744600346703603785837059119988363911159892596584356890454306942557541867142132313588263419168142462240594527330142547425445173369183707772836491178025357300693448762029958271044451535857928126771288697624311455364315950963703622122542913177388754982749304323809949606992982533224338304625043736249383900768684709711238421824195735379675214266799429990975635487665582272921808093462295662218207098722829790969474706611734312724002146615710872231072423618219352067076320293273584270221067790958077535425633556015434869620304190823836837056216440650616020961743938153088320469663962687871888820727918339651782444731091187316127203857351758230732664251640924858251829586041180155313998554924277211182817575489808391916650865095750223310024856113501116745464367796307906028351192546872074509198802498361750200678500584741329665941940462809179303938769238833114696124222401081552791995433036711626192261860234752645916206283522554715310236706266238202803620903231668824513970051948063072199458998667812144956151119786260992429893606340339435276068924866681686028990603238270518901534542967252600529323886375977860567957503
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4c6367959a15cb9ee6455c7daf1d263a284483d5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rossroofing1950.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rossroofing1950.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018cf26e54650000040300463044022100a404278222aef8dbeeb061b0578063e9bcdf892d8d8203197eceba0357755e99021f759e1319000cb1aafdd69f88d06b948ba0091d943a0b1a65c09701577dca63007500a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018cf26e54640000040300463044022069b1bb8c20147be1ca999af898495d68c95ed2e304f6ab64d68f95064caedc3a02202c2a7673b96c0f1aed99fbb5807a0f709d8bd52423ed0434570311bd9c220cc3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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